Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

cfb6c8a037...cs.exe

windows7-x64

10

cfb6c8a037...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cfb6c8a0371161979a58d2d695a9c7c0_NeikiAnalytics

  • Size

    275KB

  • Sample

    240515-njh6fafb3s

  • MD5

    cfb6c8a0371161979a58d2d695a9c7c0

  • SHA1

    7a8340c3f09f4593c6eb2f11015efde651b0017e

  • SHA256

    25fd928ced606eb6e884861393b34c269cca1873f4f5f6f81006b70e80bc3b67

  • SHA512

    bac53e1dced3dfa9afb65b2a19868ae51e83d010437d70ba99f26f4ad96e44206ab1d36618b9f7bdbd8402aa8e5e9183b46cce28e56aae54931f54a9ea151d43

  • SSDEEP

    3072:4/QFiVzgzL20WKFcp9jRV5C/8qy4p2Y7YWlt63cp9jRV5C/8qy4fi:4Ik9gzL2V4cpC0L4AY7YWT63cpC0L4f

Score
10/10
persistence

Malware Config

Targets

    • Target

      cfb6c8a0371161979a58d2d695a9c7c0_NeikiAnalytics

    • Size

      275KB

    • MD5

      cfb6c8a0371161979a58d2d695a9c7c0

    • SHA1

      7a8340c3f09f4593c6eb2f11015efde651b0017e

    • SHA256

      25fd928ced606eb6e884861393b34c269cca1873f4f5f6f81006b70e80bc3b67

    • SHA512

      bac53e1dced3dfa9afb65b2a19868ae51e83d010437d70ba99f26f4ad96e44206ab1d36618b9f7bdbd8402aa8e5e9183b46cce28e56aae54931f54a9ea151d43

    • SSDEEP

      3072:4/QFiVzgzL20WKFcp9jRV5C/8qy4p2Y7YWlt63cp9jRV5C/8qy4fi:4Ik9gzL2V4cpC0L4AY7YWT63cpC0L4f

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks