Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

cf23c3cac9...cs.exe

windows7-x64

7

cf23c3cac9...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cf23c3cac9c5eda1b2810d90fefa7e10_NeikiAnalytics

  • Size

    1.1MB

  • Sample

    240510-ncr5rsee56

  • MD5

    cf23c3cac9c5eda1b2810d90fefa7e10

  • SHA1

    c562db81e4750235af84ea8ec67d2201dbc13f82

  • SHA256

    07286691f32c8ddef4751b8bcdb641e2016d1f13312ef02576ce1ff1450a0cd5

  • SHA512

    dec118717e068949a5c198e120c0572f6c1b491ee05b921acf21e4a8213719e70ea7f255539e5ac258ce9d3161779f10658deb213ffc77e208016fac6b49d721

  • SSDEEP

    24576:oWGEFW2ImNZLfWq6JB0yfS4+fcTU1urB54Qp8iFzLAT:VG2WGTWb92ul54Qp8is

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      cf23c3cac9c5eda1b2810d90fefa7e10_NeikiAnalytics

    • Size

      1.1MB

    • MD5

      cf23c3cac9c5eda1b2810d90fefa7e10

    • SHA1

      c562db81e4750235af84ea8ec67d2201dbc13f82

    • SHA256

      07286691f32c8ddef4751b8bcdb641e2016d1f13312ef02576ce1ff1450a0cd5

    • SHA512

      dec118717e068949a5c198e120c0572f6c1b491ee05b921acf21e4a8213719e70ea7f255539e5ac258ce9d3161779f10658deb213ffc77e208016fac6b49d721

    • SSDEEP

      24576:oWGEFW2ImNZLfWq6JB0yfS4+fcTU1urB54Qp8iFzLAT:VG2WGTWb92ul54Qp8is

    Score
    7/10
    persistencespywarestealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks