Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

ddd7d0019d...cs.exe

windows7-x64

10

ddd7d0019d...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ddd7d0019d765213a24dc75f3e3f12a0_NeikiAnalytics

  • Size

    242KB

  • Sample

    240516-paj7tabf9t

  • MD5

    ddd7d0019d765213a24dc75f3e3f12a0

  • SHA1

    7899fa6af58b6018ef36f016c41f2cf08d21f6dd

  • SHA256

    1338881e9834a52ffdce2dc98a2c8c43451d73591184a9c393fc3b6eb9e5a8cf

  • SHA512

    f28b7d4d3ae31a76b59c17f1fe23fb565c057fda2686e1f3997737744c0e4b0ef20e014271f4a7e120b36bb56c9b7550125b4793d00b37405185febbfae9c2c1

  • SSDEEP

    3072:WS/hELPkOax2qO6WKuH+S2qOiG6eyWKuCma+S2qOiG6eyWKuCma+S2qOiG6eyWC3:WVykEV66LB6X62UyHEYa0

Score
10/10
persistence

Malware Config

Targets

    • Target

      ddd7d0019d765213a24dc75f3e3f12a0_NeikiAnalytics

    • Size

      242KB

    • MD5

      ddd7d0019d765213a24dc75f3e3f12a0

    • SHA1

      7899fa6af58b6018ef36f016c41f2cf08d21f6dd

    • SHA256

      1338881e9834a52ffdce2dc98a2c8c43451d73591184a9c393fc3b6eb9e5a8cf

    • SHA512

      f28b7d4d3ae31a76b59c17f1fe23fb565c057fda2686e1f3997737744c0e4b0ef20e014271f4a7e120b36bb56c9b7550125b4793d00b37405185febbfae9c2c1

    • SSDEEP

      3072:WS/hELPkOax2qO6WKuH+S2qOiG6eyWKuCma+S2qOiG6eyWKuCma+S2qOiG6eyWC3:WVykEV66LB6X62UyHEYa0

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks