Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

7

9f70762bb3...cs.exe

windows7-x64

10

9f70762bb3...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9f70762bb38bc1a16bb8507494406440_NeikiAnalytics

  • Size

    51KB

  • Sample

    240514-h1tqlsfb32

  • MD5

    9f70762bb38bc1a16bb8507494406440

  • SHA1

    54940a2ccfd4573cedf91cc57ce34d0b100f91a6

  • SHA256

    d40d67471a402e1b30c3226185882cb061279258c361c2764c1216385f5e5852

  • SHA512

    855625455ecd6c30ec7a01bc454a581ea84f60d42b36519cc8ae3b2f538455c521045e25183ad4afd5447145b0ab13fb40d5af40af11738df1d2fc9c16661515

  • SSDEEP

    768:nNAGAkIo/juokwoL7627d9rIiClJAxiFkJT22euOiya6lHOYxY0x0KS3p:nNJb/HkwoLe29UjQ4wqQOLIMVnS3p

Score
10/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      9f70762bb38bc1a16bb8507494406440_NeikiAnalytics

    • Size

      51KB

    • MD5

      9f70762bb38bc1a16bb8507494406440

    • SHA1

      54940a2ccfd4573cedf91cc57ce34d0b100f91a6

    • SHA256

      d40d67471a402e1b30c3226185882cb061279258c361c2764c1216385f5e5852

    • SHA512

      855625455ecd6c30ec7a01bc454a581ea84f60d42b36519cc8ae3b2f538455c521045e25183ad4afd5447145b0ab13fb40d5af40af11738df1d2fc9c16661515

    • SSDEEP

      768:nNAGAkIo/juokwoL7627d9rIiClJAxiFkJT22euOiya6lHOYxY0x0KS3p:nNJb/HkwoLe29UjQ4wqQOLIMVnS3p

    Score
    10/10
    evasionpersistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Drops file in Drivers directory

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks