Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

5fb8db5f9d...cs.exe

windows7-x64

1

5fb8db5f9d...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5fb8db5f9d627befcd977ee992b3ffd0_NeikiAnalytics

  • Size

    76KB

  • Sample

    240514-db8e9agf32

  • MD5

    5fb8db5f9d627befcd977ee992b3ffd0

  • SHA1

    8528775ea42951e35d22da71315c5fd3c8df5498

  • SHA256

    203054a655fdb8d37b39a9d65cf81b96660e49d6aa5d310eaa7099beaf0c319e

  • SHA512

    3f9814e9d1d05115259df6440c304b137828943eb0c022b70dbf684ba7827cc21485c7afaea038a794fc970e6468d3051cc054b4589d0eabb027a50b3d0997e0

  • SSDEEP

    1536:MvP69lUyW1UwzJmWRaD1gXI7uMrpzrnacxfzZ1:G69lU2UmWVXI7uMlzTFz7

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      5fb8db5f9d627befcd977ee992b3ffd0_NeikiAnalytics

    • Size

      76KB

    • MD5

      5fb8db5f9d627befcd977ee992b3ffd0

    • SHA1

      8528775ea42951e35d22da71315c5fd3c8df5498

    • SHA256

      203054a655fdb8d37b39a9d65cf81b96660e49d6aa5d310eaa7099beaf0c319e

    • SHA512

      3f9814e9d1d05115259df6440c304b137828943eb0c022b70dbf684ba7827cc21485c7afaea038a794fc970e6468d3051cc054b4589d0eabb027a50b3d0997e0

    • SSDEEP

      1536:MvP69lUyW1UwzJmWRaD1gXI7uMrpzrnacxfzZ1:G69lU2UmWVXI7uMlzTFz7

    Score
    7/10
    persistenceupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks