Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

2f0bc5e68a...cs.exe

windows7-x64

10

2f0bc5e68a...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2f0bc5e68a2d3e54d6674eee9a216860_NeikiAnalytics.exe

  • Size

    198KB

  • Sample

    240519-y23ynsfh48

  • MD5

    2f0bc5e68a2d3e54d6674eee9a216860

  • SHA1

    dc1a145420759f4b94840dcab2009dd9ee3db5e7

  • SHA256

    08c3b88bf8cb18146c01973c6af078d06d936981e0e4e606faa54208a84a93aa

  • SHA512

    f62d7b2e87b713ac200641abffefded716de3ac600d6ae182643a2a1d0eab888de808075af4a10608ccb661f5c28858d64b15705437b1e7de64bc3a16e88d985

  • SSDEEP

    3072:2d6H0A9RkrelSv2liC4Sp+7H7wWkqrifbdB7dYk1Bx8DpsV6OzrCIwfE:2sUceilS8iCBOHhkym/89bKws

Score
10/10
persistence

Malware Config

Targets

    • Target

      2f0bc5e68a2d3e54d6674eee9a216860_NeikiAnalytics.exe

    • Size

      198KB

    • MD5

      2f0bc5e68a2d3e54d6674eee9a216860

    • SHA1

      dc1a145420759f4b94840dcab2009dd9ee3db5e7

    • SHA256

      08c3b88bf8cb18146c01973c6af078d06d936981e0e4e606faa54208a84a93aa

    • SHA512

      f62d7b2e87b713ac200641abffefded716de3ac600d6ae182643a2a1d0eab888de808075af4a10608ccb661f5c28858d64b15705437b1e7de64bc3a16e88d985

    • SSDEEP

      3072:2d6H0A9RkrelSv2liC4Sp+7H7wWkqrifbdB7dYk1Bx8DpsV6OzrCIwfE:2sUceilS8iCBOHhkym/89bKws

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks