Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    15/05/2024, 06:24

General

  • Target

    95f2e81fc84d51feb1c8dd9beb35a130_NeikiAnalytics.exe

  • Size

    3.2MB

  • MD5

    95f2e81fc84d51feb1c8dd9beb35a130

  • SHA1

    77df9c21a4c853b4a37bd3421f526e6a5e352218

  • SHA256

    4b68ea0ac562a9170d47b312b74576cb18d86dc5b3126b1819f730bf1147901a

  • SHA512

    6422caf2f0d8143bca8f6bf769734b32ce9d4df9b50e08a6a01ef7a63aa9f0579effbdd102cea951404b7d06abcb25617dff8729d374193305c881adc64d1c48

  • SSDEEP

    49152:K8kAJeK5ZA/zd+TjK341N0M9v0qHYnkexQ8fwGOyF8H8m3:KNoA/zdqQQ/9v0qHYnLBYyqH8C

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Drops desktop.ini file(s) 6 IoCs
  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\95f2e81fc84d51feb1c8dd9beb35a130_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\95f2e81fc84d51feb1c8dd9beb35a130_NeikiAnalytics.exe"
    1⤵
    • Drops desktop.ini file(s)
    • Drops file in Program Files directory
    PID:2132

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\osetup.dll

    Filesize

    8.7MB

    MD5

    c1e42731454bda60de3394189308b936

    SHA1

    968fc7914c29bdfc373ee89eecbce5a6669cedeb

    SHA256

    29f400fecc71b2aa6fb0807f1b2b08b883e3b118959130b29ea5f1959670045d

    SHA512

    0d40c68fb0af31693d6851f8cf8697881d61070492de3401e85cd7cd3e1c464cc8b5218bb9c7c403cba7a43664b634074811b7c173e726ccd48e42de3e16be29

  • C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPOBJS.DLL

    Filesize

    5B

    MD5

    b5b682b742431a52ea8b17c72ad9c572

    SHA1

    326320f469235708c59f678c9a7357dca552d306

    SHA256

    30d9045a9f172208b13161d1f5204e5787e5e07bfbb4f490d0041b03b7f44f76

    SHA512

    4e1bd7cc616b3115baf6be7ebd29fe2d1123bc0f25464865a0cf9207b0344fba70747a5ce6f00e8d9c696881f6db1e12f81736bc748b6f2b60bf84c681a49163

  • memory/2132-0-0x0000000000400000-0x000000000040A000-memory.dmp

    Filesize

    40KB

  • memory/2132-234-0x0000000000400000-0x000000000040A000-memory.dmp

    Filesize

    40KB