Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

e593759a35...cs.exe

windows7-x64

10

e593759a35...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e593759a3579adb8624c53c0ec100190_NeikiAnalytics

  • Size

    53KB

  • Sample

    240516-vaej8aeb84

  • MD5

    e593759a3579adb8624c53c0ec100190

  • SHA1

    6d9e9dc48a21eab7d8c793441db65a4adf659da3

  • SHA256

    d9acb4a86c8b5e0346738e4233e21544291ce8bb3d6ad98bb6923705710dad05

  • SHA512

    77e163a01f095cdda3405b430409c8949141b9b4165ee67f3fccbb13ea8c33a76a987b00434cf2ed0bc41436d4b329062bf022c85266f0c1ca22eda62cadd765

  • SSDEEP

    1536:vNVg8r8QgMiqu7Kp3StjEMjmLM3ztDJWZsXy4JzxPMU:gMiXJJjmLM3zRJWZsXy4Jd

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      e593759a3579adb8624c53c0ec100190_NeikiAnalytics

    • Size

      53KB

    • MD5

      e593759a3579adb8624c53c0ec100190

    • SHA1

      6d9e9dc48a21eab7d8c793441db65a4adf659da3

    • SHA256

      d9acb4a86c8b5e0346738e4233e21544291ce8bb3d6ad98bb6923705710dad05

    • SHA512

      77e163a01f095cdda3405b430409c8949141b9b4165ee67f3fccbb13ea8c33a76a987b00434cf2ed0bc41436d4b329062bf022c85266f0c1ca22eda62cadd765

    • SSDEEP

      1536:vNVg8r8QgMiqu7Kp3StjEMjmLM3ztDJWZsXy4JzxPMU:gMiXJJjmLM3zRJWZsXy4Jd

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks