Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    96s
  • max time network
    98s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/05/2024, 04:23

General

  • Target

    7c2827ed0020fe6dedb95d9b329de460_NeikiAnalytics.exe

  • Size

    138KB

  • MD5

    7c2827ed0020fe6dedb95d9b329de460

  • SHA1

    a74123601a89166ac88abfdfea9e857903abefd9

  • SHA256

    33bcca4963612bb10c2c64d262b9939d2a1e596e8db408fe338d6299abe51bb5

  • SHA512

    41d3cf593736981260b356e6a1acf9e56d82898a98a66282b6b91cf3d72ea36b074d0ea1d3c78b65ab1dd11e018639646bb1b659f3fd536fbdee487a7db2a4e5

  • SSDEEP

    3072:+OpFhrH21lww+dvnNjC5zxFiMxkqC4giUvQkuPcA1Khe2yU:Jp7H2fadvNu5zKIpC4gnvQkw71IyU

Score
8/10

Malware Config

Signatures

  • Modifies AppInit DLL entries 2 TTPs
  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Executes dropped EXE 1 IoCs
  • Drops file in Program Files directory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7c2827ed0020fe6dedb95d9b329de460_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\7c2827ed0020fe6dedb95d9b329de460_NeikiAnalytics.exe"
    1⤵
    • Drops file in Program Files directory
    PID:4196
  • C:\PROGRA~3\Mozilla\ykjyebb.exe
    C:\PROGRA~3\Mozilla\ykjyebb.exe -aryugnm
    1⤵
    • Executes dropped EXE
    • Drops file in Program Files directory
    PID:2492

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\ProgramData\Mozilla\ykjyebb.exe

    Filesize

    138KB

    MD5

    a8c3db1165a80d61dffbde10333e6adf

    SHA1

    6626048b72ccde04cb9e30f82d652b3e2ccb6a0c

    SHA256

    95630acb498e64f55259cb97e99d6b0d3df77b46621af6e5d05abc17e4a15369

    SHA512

    8556412107cee3917bea82e7f91104f7ffa64e70ba8c4893f84e4f23aaa2622eea195fdcf17380302fbceae4859220638ebabaf25dc34f7547084efd9458810b

  • memory/2492-10-0x0000000000400000-0x000000000045E000-memory.dmp

    Filesize

    376KB

  • memory/2492-9-0x0000000000400000-0x000000000045E000-memory.dmp

    Filesize

    376KB

  • memory/2492-8-0x0000000000400000-0x000000000045E000-memory.dmp

    Filesize

    376KB

  • memory/2492-15-0x0000000000400000-0x000000000045B000-memory.dmp

    Filesize

    364KB

  • memory/4196-0-0x0000000000400000-0x000000000045E000-memory.dmp

    Filesize

    376KB

  • memory/4196-2-0x0000000002120000-0x000000000217B000-memory.dmp

    Filesize

    364KB

  • memory/4196-1-0x0000000000400000-0x000000000045E000-memory.dmp

    Filesize

    376KB

  • memory/4196-3-0x0000000000400000-0x000000000045B000-memory.dmp

    Filesize

    364KB

  • memory/4196-12-0x0000000000400000-0x000000000045B000-memory.dmp

    Filesize

    364KB