Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    14/05/2024, 17:49

General

  • Target

    03ebeef887b6cfab8674ba1c4e117f80_NeikiAnalytics.exe

  • Size

    96KB

  • MD5

    03ebeef887b6cfab8674ba1c4e117f80

  • SHA1

    93eb6e10e8b21f92df15278533cbc5bc9bf4206d

  • SHA256

    690d213ad3c2eaea2db4d9747b773c94b306576e72ced522c79a60fd6a0bc219

  • SHA512

    ff54ac1b8b7646a580c0e012c612fbc04374a28b91e8cd5b39d36133413d96765d5545cb0f5a96128dc004a8847dc71b986a8957ebcc0404325b9d9f15d6021e

  • SSDEEP

    3072:6rWpcOPxPke+e3fFpsJOfFpsJbgEF7DMX:tFPxPke+eIJMX

Score
9/10

Malware Config

Signatures

  • Renames multiple (3441) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\03ebeef887b6cfab8674ba1c4e117f80_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\03ebeef887b6cfab8674ba1c4e117f80_NeikiAnalytics.exe"
    1⤵
    • Drops file in Program Files directory
    PID:1700

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\$Recycle.Bin\S-1-5-21-3691908287-3775019229-3534252667-1000\desktop.ini.tmp

    Filesize

    97KB

    MD5

    ac3ff04b8c4aa8b4dbeadbf200f9502b

    SHA1

    b7374df7a5b89091808572eddc45795193611d29

    SHA256

    5e8e2baa696aeb2eed25eb0c85a62a5b7cfc74d5f821001f39ec777dcb081d6d

    SHA512

    f9ad8d72afb272cdff0f36a51333e9bef1e721e915e156f046a1abef2179ea1539be0d201c30dc44e543b6e48dc05bf5858701149a920bc2e13a4d2d6821f7bb

  • C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

    Filesize

    106KB

    MD5

    f735b3558dabf396a810ca3e73dddb53

    SHA1

    f1ed4137bc37a739b1c5d88b04e820e469998237

    SHA256

    8226c34e79ed546f9e17f1c77ff3988aa63a1baa08174473deb722fca4ba48eb

    SHA512

    818b86d7962a101bc6e975c24e29ab2f91cb08518249254047d3e8d7d1bdbfb3eb9e9a1224b64264a34a8f7159ac49ca164e1f25e868b82e0f27042b4e257c16