Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

7

efe39b2f89...cs.exe

windows7-x64

10

efe39b2f89...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    efe39b2f89ed1c4fa7c156f46028e9a0_NeikiAnalytics.exe

  • Size

    446KB

  • Sample

    240517-t1d6psge67

  • MD5

    efe39b2f89ed1c4fa7c156f46028e9a0

  • SHA1

    258da989d1a75706e77330ab4d0f887bf948feba

  • SHA256

    51ebdea00f51de86fea2af210e595de6b2ac951b20f8a98c688aacb26540b3c7

  • SHA512

    54f36a28c8054eb8be094bfb00e9bb4bf0bcffdb860ca8f3030a9493f00a54c3285c1316a5d6caafc0015eff2d47fd2e6ec0b2a2c45d749ff844c0f1bcf285d5

  • SSDEEP

    3072:2mVwRKCTu8ANCHu8ANCgu8ANCqu8ANC8u8ANC3u8ANCmu8ANCIu8ANCju8ANC8:2mVnhvNhvNuvNAvNivNRvN0vNWvN1vNj

Score
10/10
evasionupx

Malware Config

Targets

    • Target

      efe39b2f89ed1c4fa7c156f46028e9a0_NeikiAnalytics.exe

    • Size

      446KB

    • MD5

      efe39b2f89ed1c4fa7c156f46028e9a0

    • SHA1

      258da989d1a75706e77330ab4d0f887bf948feba

    • SHA256

      51ebdea00f51de86fea2af210e595de6b2ac951b20f8a98c688aacb26540b3c7

    • SHA512

      54f36a28c8054eb8be094bfb00e9bb4bf0bcffdb860ca8f3030a9493f00a54c3285c1316a5d6caafc0015eff2d47fd2e6ec0b2a2c45d749ff844c0f1bcf285d5

    • SSDEEP

      3072:2mVwRKCTu8ANCHu8ANCgu8ANCqu8ANC8u8ANC3u8ANCmu8ANCIu8ANCju8ANC8:2mVnhvNhvNuvNAvNivNRvN0vNWvN1vNj

    Score
    10/10
    evasionupx

    • Modifies visibility of file extensions in Explorer

      evasion

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks