Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

ceee9c624e...cs.exe

windows7-x64

7

ceee9c624e...cs.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    153s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15/05/2024, 11:12

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ceee9c624e370dcba631e29cb0dea1a0_NeikiAnalytics.exe

  • Size

    83KB

  • MD5

    ceee9c624e370dcba631e29cb0dea1a0

  • SHA1

    25a40323e0ddd782bb61ea419bb9723378a6ea53

  • SHA256

    a31a9522657f87fda8ed8e6f1fc36a6eddffd67f82c33bd893e9291b7eb111fd

  • SHA512

    31a09d2993eda1a0a63842c36897bc874facb7bc85d957b403cbf7e0a69f33d8bf24cde81f8c0126222bfe11832d662a34c537ab2d5028ec0ce9d258d68b7dc0

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+AK:LJ0TAz6Mte4A+aaZx8EnCGVuA

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 7 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Processes

  • C:\Users\Admin\AppData\Local\Temp\ceee9c624e370dcba631e29cb0dea1a0_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\ceee9c624e370dcba631e29cb0dea1a0_NeikiAnalytics.exe"
    1⤵
      PID:4900
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4244 --field-trial-handle=2284,i,9807419199535700662,2319175108930815708,262144 --variations-seed-version /prefetch:8
      1⤵
        PID:1716

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\Users\Admin\AppData\Local\Temp\rifaien2-WAs8LuMc5OPEhe4H.exe
        Filesize

        83KB

        MD5

        6dbec76e4319df6b4e8c9ad2e6d8f47b

        SHA1

        0d09efc48a87b4a61a0b130585da8e22489e0437

        SHA256

        a1bf9879915d7c179bb0a59e5fe0407207086a9871b6b17533b8be2f3ff301d3

        SHA512

        f729aedc0cd386cbcf72c421f021e8c24be54655be7aaa038b0c6741f1ea51343af10d7a6454d16ef2a44fc107ed7a9df550d3184bf3e6b5372e21b64b8817dd

        Download Submit

      • memory/4900-0-0x0000000000400000-0x000000000042A000-memory.dmp

        Filesize

        168KB

        Download

      • memory/4900-1-0x0000000000400000-0x000000000042A000-memory.dmp

        Filesize

        168KB

        Download

      • memory/4900-8-0x0000000000400000-0x000000000042A000-memory.dmp

        Filesize

        168KB

        Download

      • memory/4900-15-0x0000000000400000-0x000000000042A000-memory.dmp

        Filesize

        168KB

        Download

      • memory/4900-21-0x0000000000400000-0x000000000042A000-memory.dmp

        Filesize

        168KB

        Download

      • memory/4900-28-0x0000000000400000-0x000000000042A000-memory.dmp

        Filesize

        168KB

        Download