Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

4cf679c63e...cs.exe

windows7-x64

7

4cf679c63e...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4cf679c63e738fe77ce6a08527e23d80_NeikiAnalytics

  • Size

    670KB

  • Sample

    240512-aapd7sfa4w

  • MD5

    4cf679c63e738fe77ce6a08527e23d80

  • SHA1

    af16a9202fb8b5af17909422c9f5338e60d41d5a

  • SHA256

    d1b54e32a1e3f8757ac742161e2e8e3ece04f5783872214e226832aed8007acd

  • SHA512

    ea9c2194616b5bacc61f014f46c665fad2e9b2ac99e6d83c228860381b16496135285df9f403fa85fd99aece22168610d52f219a0ed4d2b89a99a141b87faa12

  • SSDEEP

    6144:/rTfUHeeSKOS9ccFKk3Y9t9YZuxzK0hAhvdDf03g3d6YzjO9Zimm1NroFjXog4Os:/n8yN0Mr8ZWKzvF03EQReurog4/FIg

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      4cf679c63e738fe77ce6a08527e23d80_NeikiAnalytics

    • Size

      670KB

    • MD5

      4cf679c63e738fe77ce6a08527e23d80

    • SHA1

      af16a9202fb8b5af17909422c9f5338e60d41d5a

    • SHA256

      d1b54e32a1e3f8757ac742161e2e8e3ece04f5783872214e226832aed8007acd

    • SHA512

      ea9c2194616b5bacc61f014f46c665fad2e9b2ac99e6d83c228860381b16496135285df9f403fa85fd99aece22168610d52f219a0ed4d2b89a99a141b87faa12

    • SSDEEP

      6144:/rTfUHeeSKOS9ccFKk3Y9t9YZuxzK0hAhvdDf03g3d6YzjO9Zimm1NroFjXog4Os:/n8yN0Mr8ZWKzvF03EQReurog4/FIg

    Score
    7/10
    persistencespywarestealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks