Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

b65d56ef9d...cs.exe

windows7-x64

10

b65d56ef9d...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b65d56ef9dc32b254528120f0ce158c0_NeikiAnalytics

  • Size

    364KB

  • Sample

    240513-n5fbnsde7w

  • MD5

    b65d56ef9dc32b254528120f0ce158c0

  • SHA1

    f07ecb6e2ef570d23203b2619ffab23e8b2ee40c

  • SHA256

    b4e2444818e71d4b4c5c8cf9ac64e5f00aa3f3f5c60261edb22f2bbc234dba6b

  • SHA512

    ecaa519ac33cacf8f2c08cf56c3999bc4c9edd35b2614cdb37672a7ebde5e1257a68e1cdc363a9d5721cc5b8c0329286aa480e6a66a9ae6ae5e46d4fc2c68b23

  • SSDEEP

    6144:08PshIv66pXlV+tbFOLM77OLnFe3HCqxNRmJ4PavntPRRI:RPshI3MtsNePmjvtPRRI

Score
10/10
persistence

Malware Config

Targets

    • Target

      b65d56ef9dc32b254528120f0ce158c0_NeikiAnalytics

    • Size

      364KB

    • MD5

      b65d56ef9dc32b254528120f0ce158c0

    • SHA1

      f07ecb6e2ef570d23203b2619ffab23e8b2ee40c

    • SHA256

      b4e2444818e71d4b4c5c8cf9ac64e5f00aa3f3f5c60261edb22f2bbc234dba6b

    • SHA512

      ecaa519ac33cacf8f2c08cf56c3999bc4c9edd35b2614cdb37672a7ebde5e1257a68e1cdc363a9d5721cc5b8c0329286aa480e6a66a9ae6ae5e46d4fc2c68b23

    • SSDEEP

      6144:08PshIv66pXlV+tbFOLM77OLnFe3HCqxNRmJ4PavntPRRI:RPshI3MtsNePmjvtPRRI

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks