Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

c2ffbc6280...cs.exe

windows7-x64

7

c2ffbc6280...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c2ffbc6280c199f0531b8736778e1a30_NeikiAnalytics

  • Size

    219KB

  • Sample

    240514-mkm1caca2z

  • MD5

    c2ffbc6280c199f0531b8736778e1a30

  • SHA1

    2023c649b4c44515a79cd56190dab54240644f10

  • SHA256

    8759940eac5c28e08cb61295b8b1ad82cb4e8ea446d47a62ed85c5513220b5a5

  • SHA512

    44cf2244311c0d828178df55d4d9a758754ae285bd7ef08296a1e641455ba1b0025792bd1dfc04b94028061c975bce4f3fc7d3d1c85ea27587427c643995e1bc

  • SSDEEP

    6144:nt8IhVYFVED7l08BkjIf0r9b5if7/F0rCoSM/U16R:nt8vVED3Bk0Mr9Vif7/FcCoSmXR

Score
7/10
persistence

Malware Config

Targets

    • Target

      c2ffbc6280c199f0531b8736778e1a30_NeikiAnalytics

    • Size

      219KB

    • MD5

      c2ffbc6280c199f0531b8736778e1a30

    • SHA1

      2023c649b4c44515a79cd56190dab54240644f10

    • SHA256

      8759940eac5c28e08cb61295b8b1ad82cb4e8ea446d47a62ed85c5513220b5a5

    • SHA512

      44cf2244311c0d828178df55d4d9a758754ae285bd7ef08296a1e641455ba1b0025792bd1dfc04b94028061c975bce4f3fc7d3d1c85ea27587427c643995e1bc

    • SSDEEP

      6144:nt8IhVYFVED7l08BkjIf0r9b5if7/F0rCoSM/U16R:nt8vVED3Bk0Mr9Vif7/FcCoSmXR

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks