Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

ba6d6736a8...cs.exe

windows7-x64

10

ba6d6736a8...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ba6d6736a85db18e599c7f7c54af3ad0_NeikiAnalytics

  • Size

    96KB

  • Sample

    240515-ldql8aah8z

  • MD5

    ba6d6736a85db18e599c7f7c54af3ad0

  • SHA1

    d5f9a44edff102a9cbc612f9cda9c1518490a23c

  • SHA256

    0a5b2185c94735e780e5ffcddec3fdbea8b7a0b2a0fc24002eb71b09980ebbc5

  • SHA512

    881ea83a82a28a4ef6e5ac73ff4d8006857eb64a7323378fdd365b4580dd5bc34dec2efaa9bcf0103637ab11ec141e40807ab32c86a22f1d23552a18ec7ca5da

  • SSDEEP

    1536:Djm5XQZZ/1JCzUSeJ/o9Rr5fV3iuGLfnUy7QR8B30JBQ5mhrUQVoMdUT+irF:BZ/QUL5YiuGUDRFWMhr1Rhk

Score
10/10
persistence

Malware Config

Targets

    • Target

      ba6d6736a85db18e599c7f7c54af3ad0_NeikiAnalytics

    • Size

      96KB

    • MD5

      ba6d6736a85db18e599c7f7c54af3ad0

    • SHA1

      d5f9a44edff102a9cbc612f9cda9c1518490a23c

    • SHA256

      0a5b2185c94735e780e5ffcddec3fdbea8b7a0b2a0fc24002eb71b09980ebbc5

    • SHA512

      881ea83a82a28a4ef6e5ac73ff4d8006857eb64a7323378fdd365b4580dd5bc34dec2efaa9bcf0103637ab11ec141e40807ab32c86a22f1d23552a18ec7ca5da

    • SSDEEP

      1536:Djm5XQZZ/1JCzUSeJ/o9Rr5fV3iuGLfnUy7QR8B30JBQ5mhrUQVoMdUT+irF:BZ/QUL5YiuGUDRFWMhr1Rhk

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks