Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

bac861d934...cs.exe

windows7-x64

10

bac861d934...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bac861d934b5d885462ea5191e42d340_NeikiAnalytics

  • Size

    204KB

  • Sample

    240510-lq97dsfg3z

  • MD5

    bac861d934b5d885462ea5191e42d340

  • SHA1

    fa0b3ad150ef1626719871dbd1da848b62bf87b2

  • SHA256

    892dd69ed001880490da4409a5d27617186d7074e981efa5e572dd57e4634f3b

  • SHA512

    aac7e6712a147fe5d30710b599c0b8691f03b86fa635c41c982c1749dfe320c8be0a5977acc46783e8fb245fb63786486bc87dea190602ff3ec4e8cefba554db

  • SSDEEP

    3072:KmkW8T0tQ9nLHbB9W0c1TqECzR/mkSYGrl9ymgYUWmI:FZU4QxL7B9W0c1RCzR/fSmlg

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      bac861d934b5d885462ea5191e42d340_NeikiAnalytics

    • Size

      204KB

    • MD5

      bac861d934b5d885462ea5191e42d340

    • SHA1

      fa0b3ad150ef1626719871dbd1da848b62bf87b2

    • SHA256

      892dd69ed001880490da4409a5d27617186d7074e981efa5e572dd57e4634f3b

    • SHA512

      aac7e6712a147fe5d30710b599c0b8691f03b86fa635c41c982c1749dfe320c8be0a5977acc46783e8fb245fb63786486bc87dea190602ff3ec4e8cefba554db

    • SSDEEP

      3072:KmkW8T0tQ9nLHbB9W0c1TqECzR/mkSYGrl9ymgYUWmI:FZU4QxL7B9W0c1RCzR/fSmlg

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks