Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

a493c8b70f...cs.exe

windows7-x64

10

a493c8b70f...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a493c8b70fcfa5726f7184b72903a720_NeikiAnalytics.exe

  • Size

    890KB

  • Sample

    240517-es3rrsha54

  • MD5

    a493c8b70fcfa5726f7184b72903a720

  • SHA1

    43754e352b055eff4476cb5b2a1a1363f5a3b5f5

  • SHA256

    3ea523f542600ff639993234d2c2aa66b5fda2d3091573bc74826ece9fe8aa6a

  • SHA512

    950863aae251ff8ebc71ab2f194fe1555e592955046cf4ddbb09176866610be3a991dd2fbf3fedc8331f806ae1ffeb35af5fa0d380ee61b03227d1d14e6e3262

  • SSDEEP

    6144:BLvH74wflLPQ///NR5fKr2n0MO3LPlkUCmVs5bPQ///NR5frdQt383PQ///NR5fa:BLvH7M/Ng1/Nmr/Ng1/Nblt01PBNkEG

Score
10/10
persistence

Malware Config

Targets

    • Target

      a493c8b70fcfa5726f7184b72903a720_NeikiAnalytics.exe

    • Size

      890KB

    • MD5

      a493c8b70fcfa5726f7184b72903a720

    • SHA1

      43754e352b055eff4476cb5b2a1a1363f5a3b5f5

    • SHA256

      3ea523f542600ff639993234d2c2aa66b5fda2d3091573bc74826ece9fe8aa6a

    • SHA512

      950863aae251ff8ebc71ab2f194fe1555e592955046cf4ddbb09176866610be3a991dd2fbf3fedc8331f806ae1ffeb35af5fa0d380ee61b03227d1d14e6e3262

    • SSDEEP

      6144:BLvH74wflLPQ///NR5fKr2n0MO3LPlkUCmVs5bPQ///NR5frdQt383PQ///NR5fa:BLvH7M/Ng1/Nmr/Ng1/Nblt01PBNkEG

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks