Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

81815a906d...cs.exe

windows7-x64

10

81815a906d...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    81815a906d6fb410025df6f493c9f8f0_NeikiAnalytics

  • Size

    347KB

  • Sample

    240511-fg6jysec7w

  • MD5

    81815a906d6fb410025df6f493c9f8f0

  • SHA1

    bf9b12ef6213d7595d442d0e0c9d224f24f13a91

  • SHA256

    3c2bd16d6271533e9c64430d55394560e6b662079543e6644ae4862b0e24c005

  • SHA512

    3cedd67fe2990396e0b1271d4c27bc2064e9cc55073fca0cf0055912a4e05324a4d29dea544ce21449728711ea38d1561a7656660d81ce1b19d5c71fda675771

  • SSDEEP

    6144:YAF+75Y7a5Mx4brq2Ah1FM6234lKm3mo8Yvi4KsLTFM6234lKm3qk9:YA87ox4brRGFB24lwR45FB24lEk

Score
10/10
persistence

Malware Config

Targets

    • Target

      81815a906d6fb410025df6f493c9f8f0_NeikiAnalytics

    • Size

      347KB

    • MD5

      81815a906d6fb410025df6f493c9f8f0

    • SHA1

      bf9b12ef6213d7595d442d0e0c9d224f24f13a91

    • SHA256

      3c2bd16d6271533e9c64430d55394560e6b662079543e6644ae4862b0e24c005

    • SHA512

      3cedd67fe2990396e0b1271d4c27bc2064e9cc55073fca0cf0055912a4e05324a4d29dea544ce21449728711ea38d1561a7656660d81ce1b19d5c71fda675771

    • SSDEEP

      6144:YAF+75Y7a5Mx4brq2Ah1FM6234lKm3mo8Yvi4KsLTFM6234lKm3qk9:YA87ox4brRGFB24lwR45FB24lEk

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks