Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

079fbaa2a8...cs.exe

windows7-x64

1

079fbaa2a8...cs.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/05/2024, 13:14

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    079fbaa2a81b576f7b5a885fd7fa8470_NeikiAnalytics.exe

  • Size

    760KB

  • MD5

    079fbaa2a81b576f7b5a885fd7fa8470

  • SHA1

    c3a5d18e7ffce43cc19029f25e7f3804cd13d491

  • SHA256

    0a59cda40a342e9a2ea8945e934fe59f1ffe737d90102ada1f44f2d5f92499aa

  • SHA512

    8a0c336e9760d2a560a36c17fc6d4abcc96fb90e16ec2f3265ac540339d88ab00ddfd7037e45e8e476a73fc2157513666b50b26e1602b5e1f86c040dc5b56359

  • SSDEEP

    12288:wiPkpIPj92aSOcpS1sN5szNTppIPj92aSOc:wy5h2ahkS1sN5s1kh2ah

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\079fbaa2a81b576f7b5a885fd7fa8470_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\079fbaa2a81b576f7b5a885fd7fa8470_NeikiAnalytics.exe"
    1⤵
      PID:4236
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4236 -s 216
        2⤵
        • Program crash
        PID:4616
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 4236 -ip 4236
      1⤵
        PID:4732

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4236-0-0x0000000000400000-0x00000000004BE000-memory.dmp

        Filesize

        760KB

        Download

      • memory/4236-1-0x0000000000400000-0x00000000004BE000-memory.dmp

        Filesize

        760KB

        Download