Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

208cc46a09...cs.exe

windows7-x64

10

208cc46a09...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    208cc46a095afe8c984556cec3097ec0_NeikiAnalytics

  • Size

    211KB

  • Sample

    240513-1gtwdaef7x

  • MD5

    208cc46a095afe8c984556cec3097ec0

  • SHA1

    91d38e6348fabd7c1c901f9c871f1a94a4cdb1c4

  • SHA256

    dc744862f33f7a231e99f67613748cf475337ab8cbc8a7b6cc02ce14c27e01a1

  • SHA512

    c00287d33a39fc7ead37c3672fbd05943db37ac189b9eeaf39c35a1e701d9f9058559796ba098077a48b62eff396adbe869bb53ce471c233ced4d145ae8d246e

  • SSDEEP

    3072:JD6Xtx68yygRBE52mxkEOHLRMpZ4deth8PEAjAfIbAYGPhz6sPJBInxZqOi:Jh8cBzHLRMpZ4d1Zi

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      208cc46a095afe8c984556cec3097ec0_NeikiAnalytics

    • Size

      211KB

    • MD5

      208cc46a095afe8c984556cec3097ec0

    • SHA1

      91d38e6348fabd7c1c901f9c871f1a94a4cdb1c4

    • SHA256

      dc744862f33f7a231e99f67613748cf475337ab8cbc8a7b6cc02ce14c27e01a1

    • SHA512

      c00287d33a39fc7ead37c3672fbd05943db37ac189b9eeaf39c35a1e701d9f9058559796ba098077a48b62eff396adbe869bb53ce471c233ced4d145ae8d246e

    • SSDEEP

      3072:JD6Xtx68yygRBE52mxkEOHLRMpZ4deth8PEAjAfIbAYGPhz6sPJBInxZqOi:Jh8cBzHLRMpZ4d1Zi

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks