Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

e4197dbec9...cs.exe

windows7-x64

7

e4197dbec9...cs.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    120s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16/05/2024, 16:01

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    e4197dbec945cda040f3ae1c533fce20_NeikiAnalytics.exe

  • Size

    29KB

  • MD5

    e4197dbec945cda040f3ae1c533fce20

  • SHA1

    9b7849c46164399d0931d7b2b71877dba0798850

  • SHA256

    61186a15f693665a5962a7a652dadfcd667454cb0b422149c12cb3cecb869601

  • SHA512

    fe091fb92db1c805a63f71283406f55f572a0b92018f4f00b983c0933f66aa9e6c716715d0a82f420ed3ff2255e4a73816a45c477b36fdd3006f477dc9e1ef92

  • SSDEEP

    768:ITRfpN0pOy3OzeXmOGXbJOlB2vsLCik5dAy7b6lSy:IHzzeWHXbJGB2EOik5h36lV

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Processes

  • C:\Users\Admin\AppData\Local\Temp\e4197dbec945cda040f3ae1c533fce20_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\e4197dbec945cda040f3ae1c533fce20_NeikiAnalytics.exe"
    1⤵
      PID:1368

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\My Downloads\Winzip 8.0 Patch.exe
      Filesize

      29KB

      MD5

      651f6beba6800f2565a8df31cf821c6a

      SHA1

      07a2763a6afa8d5faf1373b73930bbc182e44062

      SHA256

      1b3177f698526cfbd3ba5c70ed387882f7c687774ea72917eff6b9fbb62bf3fa

      SHA512

      b41434f6ff9cfba168d177b53e5dafdc359d42ffb90f520168257f84f0385d4e936fea5672443676a32a7444409df7b1860757a6003b92875660a413383119fa

      Download Submit

    • memory/1368-0-0x0000000000400000-0x000000000041A000-memory.dmp

      Filesize

      104KB

      Download

    • memory/1368-102-0x0000000000400000-0x000000000041A000-memory.dmp

      Filesize

      104KB

      Download