Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

e3d56cb8a1...cs.exe

windows7-x64

7

e3d56cb8a1...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e3d56cb8a1888a094bd62f0c55b20120_NeikiAnalytics.exe

  • Size

    12KB

  • Sample

    240517-kxbrqsag99

  • MD5

    e3d56cb8a1888a094bd62f0c55b20120

  • SHA1

    1deb91560f6f2d9df5c1e554b14cfd4ab0081bf3

  • SHA256

    678a9e0f6907b201d89975a23139c7e9b56fa092e071e67fd1073d82e73730f9

  • SHA512

    323d46ca80409e87bb7b26ea0718749e2f0c3bbadc4a8ab413d37d50fade5d17958b38b54e450d16a0cbc47390bf48706edf6197d919dbf59f84a1edd481f4c5

  • SSDEEP

    384:cL7li/2zTq2DcEQvdhcJKLTp/NK9xaqd:6fM/Q9cqd

Score
7/10

Malware Config

Targets

    • Target

      e3d56cb8a1888a094bd62f0c55b20120_NeikiAnalytics.exe

    • Size

      12KB

    • MD5

      e3d56cb8a1888a094bd62f0c55b20120

    • SHA1

      1deb91560f6f2d9df5c1e554b14cfd4ab0081bf3

    • SHA256

      678a9e0f6907b201d89975a23139c7e9b56fa092e071e67fd1073d82e73730f9

    • SHA512

      323d46ca80409e87bb7b26ea0718749e2f0c3bbadc4a8ab413d37d50fade5d17958b38b54e450d16a0cbc47390bf48706edf6197d919dbf59f84a1edd481f4c5

    • SSDEEP

      384:cL7li/2zTq2DcEQvdhcJKLTp/NK9xaqd:6fM/Q9cqd

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks