Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
140s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
13/05/2024, 15:57
Behavioral task
behavioral1
Sample
bdaffdf4722b60b04d74b7a66cda2680_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
bdaffdf4722b60b04d74b7a66cda2680_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
bdaffdf4722b60b04d74b7a66cda2680_NeikiAnalytics.exe
-
Size
83KB
-
MD5
bdaffdf4722b60b04d74b7a66cda2680
-
SHA1
06897de3d90cf685eeb08e8e7ba04d3b6e7032c5
-
SHA256
8ee79e97086f20b98d43dcd57a00f2fe2b0cd19820ad4b99881547a25a9ea0f6
-
SHA512
439e624cd1bf9ef581feb5cd0624070e30f5e79d74019b15abb208253932b347dfa996f4d45e617d0e8ab2ee3e504ff2cdc03d02edcf4edab7d685509819db71
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+bK:LJ0TAz6Mte4A+aaZx8EnCGVub
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2392-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2392-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2392-7-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/files/0x0004000000004ed7-11.dat upx behavioral1/memory/2392-14-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2392-21-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2392-28-0x0000000000400000-0x000000000042A000-memory.dmp upx
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
83KB
MD552bc632c40e266888f4522ffc13e4413
SHA1f225df562ce1d51ce5b7daff7385cd826f2fc2df
SHA25635399246fe0efa84da4486086bbd9371ca8012da7669ae938215496890096d96
SHA512ba1f53046bb820d77b2d4008fc89faf4613730032403b0975af34c79a1a7dd13b3c1aa8568f113b526f7627136da3146f7f4cc039d201f0a279f564dde5a6141