Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    11/05/2024, 11:55

General

  • Target

    b1c43c6c7ec29dddc5bb6a47dd26f740_NeikiAnalytics.exe

  • Size

    665KB

  • MD5

    b1c43c6c7ec29dddc5bb6a47dd26f740

  • SHA1

    42cc1a10e86059731b9fe11e75f64fc3e0fddb0f

  • SHA256

    867901022b465f9d33e7c6658ceec9ff452044545897719789f45e16c1f71812

  • SHA512

    7468be5e43bc01fd55928c978eb5b03e5fd50a7c3fd5e4890005bd15d04f5dda7f1fa24c6cc0af162153ae85df8fc9cf79d091c3e0b4806465825b590ff34c7c

  • SSDEEP

    12288:Sr73WDB6lkiJbUORCnH8i+Ep3CkKQbnFo/+Wzf8GvjbWeWlP5uweQuaxVbfHGj8j:S/WDpiJbucGp3CqoGWzEGvHbMxuouOxv

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b1c43c6c7ec29dddc5bb6a47dd26f740_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\b1c43c6c7ec29dddc5bb6a47dd26f740_NeikiAnalytics.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1688

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1688-0-0x0000000000400000-0x000000000066A000-memory.dmp

    Filesize

    2.4MB

  • memory/1688-1-0x0000000000280000-0x0000000000281000-memory.dmp

    Filesize

    4KB

  • memory/1688-4-0x0000000000400000-0x000000000066A000-memory.dmp

    Filesize

    2.4MB