Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

e40cc6f16d...cs.exe

windows7-x64

3

e40cc6f16d...cs.exe

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

agents.dll

windows7-x64

3

agents.dll

windows10-2004-x64

3

atl90.dll

windows7-x64

1

atl90.dll

windows10-2004-x64

1

audio.dll

windows7-x64

3

audio.dll

windows10-2004-x64

3

core.dll

windows7-x64

3

core.dll

windows10-2004-x64

3

defaultUrl...s.html

windows7-x64

1

defaultUrl...s.html

windows10-2004-x64

1

defaultUrl...s.html

windows7-x64

1

defaultUrl...s.html

windows10-2004-x64

1

defaultUrl...s.html

windows7-x64

1

defaultUrl...s.html

windows10-2004-x64

1

defaultUrl..._.html

windows7-x64

1

defaultUrl..._.html

windows10-2004-x64

1

fileclient.dll

windows7-x64

3

fileclient.dll

windows10-2004-x64

3

flui.dll

windows7-x64

1

flui.dll

windows10-2004-x64

1

los.dll

windows7-x64

3

los.dll

windows10-2004-x64

3

lregistry.dll

windows7-x64

3

lregistry.dll

windows10-2004-x64

3

lstart.exe

windows7-x64

1

lstart.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e40cc6f16d1e74d9180e98f6a9835090_NeikiAnalytics

  • Size

    5.3MB

  • Sample

    240516-te8hescb91

  • MD5

    e40cc6f16d1e74d9180e98f6a9835090

  • SHA1

    f896536fd9cef1503aaf09b0b3770f6600d5aab7

  • SHA256

    c486b3ea362c122d2ac9507a474f0df7eed2ebcd4db060a6a5f0ee25a51285bb

  • SHA512

    f4c0514628218e3c4ab512f7c8b2f7223feaba900cd981041f2b908c5cc2ad6af31c3342c9493ec6a41e529241b20bf742d5dc1ca1dcba986c8a74bebf726509

  • SSDEEP

    98304:lJEnc3aGV9ex3d8GrWATBDcNiQAAcCvsknhWcfYRAvKHj1dbAfB8miu+YyET:LEUb9+2GjTpUcCvsknLozoqg9

Score
3/10

Malware Config

Targets

    • Target

      e40cc6f16d1e74d9180e98f6a9835090_NeikiAnalytics

    • Size

      5.3MB

    • MD5

      e40cc6f16d1e74d9180e98f6a9835090

    • SHA1

      f896536fd9cef1503aaf09b0b3770f6600d5aab7

    • SHA256

      c486b3ea362c122d2ac9507a474f0df7eed2ebcd4db060a6a5f0ee25a51285bb

    • SHA512

      f4c0514628218e3c4ab512f7c8b2f7223feaba900cd981041f2b908c5cc2ad6af31c3342c9493ec6a41e529241b20bf742d5dc1ca1dcba986c8a74bebf726509

    • SSDEEP

      98304:lJEnc3aGV9ex3d8GrWATBDcNiQAAcCvsknhWcfYRAvKHj1dbAfB8miu+YyET:LEUb9+2GjTpUcCvsknLozoqg9

    Score
    3/10
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      c6f5b9596db45ce43f14b64e0fbcf552

    • SHA1

      665a2207a643726602dc3e845e39435868dddabc

    • SHA256

      4b6da3f2bdb6c452fb493b98f6b7aa1171787dbd3fa2df2b3b22ccaeac88ffa0

    • SHA512

      8faa0204f9ed2721acede285be843b5a2d7f9986841bcf3816ebc8900910afb590816c64aebd2dd845686daf825bbf9970cb4a08b20a785c7e54542eddc5b09a

    • SSDEEP

      192:qADKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQbVUSF:qAViJrtFRdbmXK8+WVUw

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      f2c993a0c726386d72e4640967cef83e

    • SHA1

      efe88db252b5e9edff2d859e783fcf1a349e553f

    • SHA256

      6739a2c8075cc383620a867e983957de0b4ae9ef0453baadd1469132893d7301

    • SHA512

      3873a87ba360702c72a6d3e853a0b6f2df219593cf5436d12a9d4d169029e939993c45330212008b628184da64ae98d6a7ab42b30d5f82c896acfc89d558169f

    • SSDEEP

      96:qBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8XQB0NKndY7ndS27gA:q6n+0SAfRE+/8k0NKdqn420

    Score
    3/10
    behavioral5behavioral6

    • Target

      agents.dll

    • Size

      256KB

    • MD5

      f890ece16964122a8f837393539004b1

    • SHA1

      2b644191181e4390b9bc9b4dc348cd1ff88bf31c

    • SHA256

      13bf7c7d08a9026fb36d918bc2f91a6620f378c72d8947099ee12f1149f1febd

    • SHA512

      4da1e8aee7afd61238d7c54bdeb2d01547680d976b08603229795e8f8a6a3c3762a30fc1c313d67f4e20b8929743233e1d20e595ea01c3c7cf490048a19e7bf4

    • SSDEEP

      3072:iKBOTtH777DXZ3tkoIb8ShQgJssgWI+D/cLuXDa1eJC/7Qu53ee5+x55hRIPo:P8TONssgSXDQeJC8unARIPo

    Score
    3/10
    behavioral7behavioral8

    • Target

      atl90.dll

    • Size

      157KB

    • MD5

      64eca1f64e4a988a6c5c93f3e5d66236

    • SHA1

      06fd9138c430e7f2d390b9a58edf5d949f57057f

    • SHA256

      ab93df816c284ac247b9087663bc449beb26e6f64d9f8a6be2efecafa7a9cedc

    • SHA512

      9646af577aa1390747cc58806d5bba167f21d4e6a05a87ddf200f3e0d64ccc05f2c0155e4da4ef89b17eea5fac748be9e4d6d074945d0bd07ab2d19e0d5ff3e2

    • SSDEEP

      3072:vwXa3XmwTrLJY+OW1U3RjYCVOGKqoQ0iTEz3Txt2ZSsRYL53Fei3RIB8HafOafai:vNXmwbJY+Ou41hVYqV0iTEzDqZSsRYj+

    Score
    1/10
    behavioral10behavioral9

    • Target

      audio.dll

    • Size

      314KB

    • MD5

      7136dd2fe0ce430b7547953f1591aaa1

    • SHA1

      40e51ab931050a8f481d30df01d0211cc1aa1b13

    • SHA256

      e540d1f3769b16937ba129213be4ebf9f51242109ffe4fba7f85fd2de2a7d724

    • SHA512

      6cf5e8d8f2a7f9d485fe5c36ccfd3fe5c317d0cb17f3336b5fa0547dc4bcdabfbed2b9a10fcb0fd534b9841e1ba4014cb6d17afe5985d4ac292f89dac123ef9e

    • SSDEEP

      6144:I/jBrLi/srCJ4Mr4bfD9Pnpxe8Ol/aHin+TAOjcT9u2yeSF:I/jBvL9/Sll/alaTQ2t

    Score
    3/10
    behavioral11behavioral12

    • Target

      core.dll

    • Size

      611KB

    • MD5

      20ab60995da5b30891ca0db28e7d2db9

    • SHA1

      9e7552caaf455a60a780318fcbf11e2e738cc331

    • SHA256

      2d52c5d87ce5df0ceeca9c3cd6cc70c386786945509ce05bccb6037e6204b460

    • SHA512

      6adcb28e72326b2287339efb8b79d39f797ae44656a664e00227dacf5782e18acdaee3e4bf14cf25aeb6abcd3f030a7e5fcfd58c2c376fbb8ff6aa5080f17bf8

    • SSDEEP

      12288:B2ZQyquS+P/gJpEnqr/UwB4eCmb0L3IE9LKr+DtLjGK8:B2mxKnQ/lB7bo3IEpKr+Dt+K8

    Score
    3/10
    behavioral13behavioral14

    • Target

      defaultUrl/pcservices.html

    • Size

      5KB

    • MD5

      ab888122cd5d7b5638f82bd2c608416b

    • SHA1

      6b7b78f882aaed84f3a2b3c8e8db98f17e879932

    • SHA256

      3b6b682280ec51045fee2fec1c72945cb56701d35837188dceee857dc190e23e

    • SHA512

      e3793ad228de5ab4c2766fa62dd9d6a8cbd8248d68a79d8d413fb3f8816e1a5d3d2c602eecc80cca8087fcd728374661cdfcdf920603a8a8a6a4865b9c4104ed

    • SSDEEP

      96:SuyURAfmJziMCxjWk1vo1USmRLod/zEvQtA455Tp5NfL5QFeEvDGtX52f5Z45QFu:SuyU/iMxkFCLmRLodrLS4zTjNtQFeGGf

    Score
    1/10
    behavioral15behavioral16

    • Target

      defaultUrl/teachingres.html

    • Size

      11KB

    • MD5

      9b3210b89be540580aabbb09c3d21314

    • SHA1

      5f19b0fbfea2638be25220aedfd82848068d388f

    • SHA256

      dd03b9fe11bb200cd382b61643bd7ec8e580887d5470ebea93dd4ef55507467e

    • SHA512

      442c083ef2e8e7e1e8691bb1f942edabd9c3e355bc9ea6084ea8738e8d4bc6b2bea08593a325771854fa5773f001934fa57196b05e79470bc11095596b531db5

    • SSDEEP

      192:SuyU/YLXwVhg0Rvv2pLodJ7jtQI6VDf+Jp9dea:SuP35qLot5

    Score
    1/10
    behavioral17behavioral18

    • Target

      defaultUrl/teachservices.html

    • Size

      17KB

    • MD5

      190d1761f41e3bbf838726c275aa0c35

    • SHA1

      8247b6183b31c7539e1b8f0058fedc9b5dd13fcf

    • SHA256

      09334c107ec9dd40b8274d521ca8aaba219ed6fffc01c631c7a37060504308d4

    • SHA512

      5f8a8f77e936f1b921af7c06f8d7149cdfae1a14fab1ef1da495cc859828f3bcd01a0ee3cbe5b0875d7f5847c480882f93ee31f8be8878535de8566bb4df058f

    • SSDEEP

      384:SIo5mZxzhNLoXOLoOCLoBMLokzAPTH+LoZzl5VgQFvpMQFzP2wQFK6SQFEcTQFbv:SKl

    Score
    1/10
    behavioral19behavioral20

    • Target

      defaultUrl/teachservices_.html

    • Size

      17KB

    • MD5

      a0b6f2fbaf8095f407b0b2530d0524a4

    • SHA1

      d2f9ce10a886a7755f8b3ccdac91bdf1a629e48e

    • SHA256

      db015f8f3715451c02a5ec385dc95e6297592740e04dfb7505137a8db6174103

    • SHA512

      b87e2725c297f9a19fe8e616deadb7352ed638d5cbc3a92a56b58fb11827f75dd2f3e3cc14939fe0856b073fdf66cd53f09c8e417e63858c3e2b2dc8f6db0df6

    • SSDEEP

      384:SIo5mZSzhNLoXOLoOCLoBMLokzAPTH+LoZzl5VgQFvpMQFzP2wQFK6SQFEcjQFbv:SnR

    Score
    1/10
    behavioral21behavioral22

    • Target

      fileclient.dll

    • Size

      156KB

    • MD5

      d6deacb737590d308a01739e36e9306d

    • SHA1

      a5ee030f6fa9457bfc0e0da54cbdf5a04c23577a

    • SHA256

      15e7ca5f9081335bfcba0898fc15fb18bf1a905c1f36e915bb38b3210e7427b7

    • SHA512

      3043000d576e7c1fcda4c6193dd8af84e095da018303c7ed1d3a60cd8c57e1f66f69fb5e61980ba900457322bb13d73346ce091586e40d976bf3e0160cfac51c

    • SSDEEP

      3072:XWwbnUcpOu7c2eonwJK2VeUjCaOK5Tdc:mAfYSeows2VeU9z6

    Score
    3/10
    behavioral23behavioral24

    • Target

      flui.dll

    • Size

      1.5MB

    • MD5

      c3a81902b947e14d936b756ca53bfab4

    • SHA1

      256aa2834dc404b4d20d45b6c1ac16598b412d5c

    • SHA256

      6602dfb02daa1163d3549bac2c67836282eb1cad3933b82d3cc706b34fcdc2bd

    • SHA512

      61e99f9e5e2f5261f0a40d16ad0d623917d91dab998ade59f5c2c2c20799f335ea42ece7ca80a93e448c0f3d5fc1ed45c35cca932e58be70022381ffdf6d14a3

    • SSDEEP

      49152:FeqWAmQrb3hg3Xaqh4vQh69v4Trd/QWNhJ+9bH0:YsX3hiX/h69G/8

    Score
    1/10
    behavioral25behavioral26

    • Target

      los.dll

    • Size

      172KB

    • MD5

      45724f37d6fc613da7b4cbd6534fb3da

    • SHA1

      2734753ac1a93656924f4b82fb69575efba5229a

    • SHA256

      3d4149d9ad0eb66fd71d96c33053a8c28e78aa9c6a1863d326678e6e1b71cbc1

    • SHA512

      43e78ffbf69a373d6d6f3c2e5599be53b785562360ca2845fdbd1b143a5920528451341364f747de5984f81470356de1141875e38ca80189de9cbb9848752e72

    • SSDEEP

      3072:DxhOmTLenLlFy+7t04l49OxiTrnKdAc0DAQD5Cx9p:D/0SSiT0AlDnQx

    Score
    3/10
    behavioral27behavioral28

    • Target

      lregistry.dll

    • Size

      56KB

    • MD5

      194935c06125e59c1ef6b115c216c52c

    • SHA1

      80b4e778f37e1d43ce4f0820759d8a20d0386504

    • SHA256

      cf74cf55791780249bdfb8324338d7eb192150bc08846ab5a46d9141f2f30e75

    • SHA512

      f2ce8ffb42bef807e1c2b3e0b6a7a97dce598af837264ecb139e1908a79dfd348c50b2644065ee971c318ac4abbef982b133944fc2f3cc9a8cb7ba4e91f1d397

    • SSDEEP

      768:0ML9X9I8hmi9QdHgv8FTcgoAAReeUbaN9AefWgTKTJFKDPIORDz:5L9CmmizOjZ695rTKybR

    Score
    3/10
    behavioral29behavioral30

    • Target

      lstart.exe

    • Size

      133KB

    • MD5

      ae893af7d0c5f4135ee559512c306aeb

    • SHA1

      cf89713eead0e2f13a5ee0b9056e355dd43cf7ce

    • SHA256

      273ee4494f1216f3872c3690e5ef5353d2d0479c914c71004450f26c336e5a42

    • SHA512

      7b956519f49e114b884f5906f45ebca8119a7c3644ebf58671da856cbc3a9e676f7dc32f57fbe2b6fa4b3d6896aafbaedee53643c579c3287d6bedd553d069a1

    • SSDEEP

      1536:LSSvov227RRIoNvuPbDIq7gnuPN0aK0bTJQ3+n2id4WZ+P5SkzkSgaR57Igyo7:LSVv3IowPliuF0Iyid4LIThaR57Io

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks