Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

a44667b74c...cs.exe

windows7-x64

10

a44667b74c...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a44667b74c7c88452e454eaf9587f470_NeikiAnalytics

  • Size

    224KB

  • Sample

    240513-hxrrvabf5z

  • MD5

    a44667b74c7c88452e454eaf9587f470

  • SHA1

    254f976f1a0d530f8098158acb3e2a7e8573aa6e

  • SHA256

    8f84cf4fb1e2c0acf5e59f0dceeec5dec19b23c0ea90d2a8b18587618ffa6e50

  • SHA512

    80faa9f0dc3ab3b050d7f2f8981720bf064638d7c270fcf6c5cf8a98bd4b39af7c829a8c360c93d0e1b147acda38a67f9a095e3f4a1ab7af013c828d9a372b65

  • SSDEEP

    3072:s4JoCbYqJTbIuYUvIMDrFDHZtOgxBOXXwwfBoD6N3h8N5G2qVUDrFDHZtOgtSU:s4J9pZ4s5tTDUZNSN58VU5tTtf

Score
10/10
persistence

Malware Config

Targets

    • Target

      a44667b74c7c88452e454eaf9587f470_NeikiAnalytics

    • Size

      224KB

    • MD5

      a44667b74c7c88452e454eaf9587f470

    • SHA1

      254f976f1a0d530f8098158acb3e2a7e8573aa6e

    • SHA256

      8f84cf4fb1e2c0acf5e59f0dceeec5dec19b23c0ea90d2a8b18587618ffa6e50

    • SHA512

      80faa9f0dc3ab3b050d7f2f8981720bf064638d7c270fcf6c5cf8a98bd4b39af7c829a8c360c93d0e1b147acda38a67f9a095e3f4a1ab7af013c828d9a372b65

    • SSDEEP

      3072:s4JoCbYqJTbIuYUvIMDrFDHZtOgxBOXXwwfBoD6N3h8N5G2qVUDrFDHZtOgtSU:s4J9pZ4s5tTDUZNSN58VU5tTtf

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks