Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

4a0553f1cf...cs.exe

windows7-x64

10

4a0553f1cf...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4a0553f1cf85037e4f25f9bc8852de00_NeikiAnalytics

  • Size

    128KB

  • Sample

    240515-acqp2sff73

  • MD5

    4a0553f1cf85037e4f25f9bc8852de00

  • SHA1

    34160a007adc02a3b8fbba2a24ba53deb05ea0ec

  • SHA256

    0c242699839b7b0f7a6c890c8633bb3b8c8f7b56dbda3f0c7af7d5acfbf4d52d

  • SHA512

    e0d387e020d0e3d8aeca905cc7ead330b7a6f572c03b7e005ea0e8acc9001d03cbed5d5b55a0aacda214e87b4a4d86a8651617d5ba6eac6375d23cf0a2f1e12c

  • SSDEEP

    3072:nqaqzlezVBEVk8QYxQdLrCimBaH8UH30ZIvM6qMH5X3O/:nwGVBEVFtCApaH8m3QIvMWH5H

Score
10/10
persistence

Malware Config

Targets

    • Target

      4a0553f1cf85037e4f25f9bc8852de00_NeikiAnalytics

    • Size

      128KB

    • MD5

      4a0553f1cf85037e4f25f9bc8852de00

    • SHA1

      34160a007adc02a3b8fbba2a24ba53deb05ea0ec

    • SHA256

      0c242699839b7b0f7a6c890c8633bb3b8c8f7b56dbda3f0c7af7d5acfbf4d52d

    • SHA512

      e0d387e020d0e3d8aeca905cc7ead330b7a6f572c03b7e005ea0e8acc9001d03cbed5d5b55a0aacda214e87b4a4d86a8651617d5ba6eac6375d23cf0a2f1e12c

    • SSDEEP

      3072:nqaqzlezVBEVk8QYxQdLrCimBaH8UH30ZIvM6qMH5X3O/:nwGVBEVFtCApaH8m3QIvMWH5H

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks