Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

011d4bea52...cs.exe

windows7-x64

10

011d4bea52...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    011d4bea523e9f2874526d8e5a2af140_NeikiAnalytics

  • Size

    1.5MB

  • Sample

    240512-mdg6hsec23

  • MD5

    011d4bea523e9f2874526d8e5a2af140

  • SHA1

    73ad644d0251f63fc59657b838e401871ddd1112

  • SHA256

    e6b45d13e4d5d282656a8daa302db9efd3f012150a6afe191c51d58c1874f521

  • SHA512

    a93e134baad7788e1555f72ba706cb0723ca992baa3e0d4b40a04d0be62d30ce2eff41eeec5aad73b60efd90fa5fb9fff41f5a7b1e3a3ba2ba4008b27ffb829d

  • SSDEEP

    24576:Dx6Q2xZmk6Ux6Q2xlPh2kkkkK4kXkkkkkkkkhLX3a20R0v50+YNpsKv2EvZHp3oW:YlmkIhbazR0vKLXZ

Score
10/10
persistence

Malware Config

Targets

    • Target

      011d4bea523e9f2874526d8e5a2af140_NeikiAnalytics

    • Size

      1.5MB

    • MD5

      011d4bea523e9f2874526d8e5a2af140

    • SHA1

      73ad644d0251f63fc59657b838e401871ddd1112

    • SHA256

      e6b45d13e4d5d282656a8daa302db9efd3f012150a6afe191c51d58c1874f521

    • SHA512

      a93e134baad7788e1555f72ba706cb0723ca992baa3e0d4b40a04d0be62d30ce2eff41eeec5aad73b60efd90fa5fb9fff41f5a7b1e3a3ba2ba4008b27ffb829d

    • SSDEEP

      24576:Dx6Q2xZmk6Ux6Q2xlPh2kkkkK4kXkkkkkkkkhLX3a20R0v50+YNpsKv2EvZHp3oW:YlmkIhbazR0vKLXZ

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks