Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

a4feb60b1b...cs.exe

windows7-x64

7

a4feb60b1b...cs.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    20/05/2024, 03:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    a4feb60b1b9f5640c24a013962253230_NeikiAnalytics.exe

  • Size

    6.2MB

  • MD5

    a4feb60b1b9f5640c24a013962253230

  • SHA1

    1708188b7c38621d987bc88d940f5e00e0855d21

  • SHA256

    9cb822b26a707fe66c9c8a79dfd079a38b849d84e0cd346f24fe35093d949dba

  • SHA512

    e2704a1f6bcb1d5b97718aa6b23a5e3fd181a845dd30873d81c26f5284120afc22d8ec723175fd288977b0fd11fa3de34f08e19251c09b55141d243c2708d367

  • SSDEEP

    196608:5sy31QOz7qvdQmRJ8aycBIGpEvNkh5E9Y:Xl7kdQuR9jh5/

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 7 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a4feb60b1b9f5640c24a013962253230_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\a4feb60b1b9f5640c24a013962253230_NeikiAnalytics.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1304
    • C:\Users\Admin\AppData\Local\Temp\a4feb60b1b9f5640c24a013962253230_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\a4feb60b1b9f5640c24a013962253230_NeikiAnalytics.exe"
      2⤵
      • Loads dropped DLL
      PID:2236

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\_MEI13042\api-ms-win-core-file-l1-2-0.dll
    Filesize

    18KB

    MD5

    285e3257c5a12d3384cd3f5a3ae941b2

    SHA1

    c05f6a72b73bc7ec8409ed42ccd947f501da0166

    SHA256

    8355bf70788c00fb1a17bc4160bcdc6930fa219b85473e08138efc10136d90eb

    SHA512

    f1ee0689b02e6a6e95940c1b3c2cc6902f3e04db44f4d767a1e68a890b7b3733b28c1d86f1f361f0db8b1ee955f5f5bca86b758b8f2e93d94b5bc4d469187df5

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI13042\api-ms-win-core-file-l2-1-0.dll
    Filesize

    18KB

    MD5

    72d542226f067dae07562fd093b0f5f0

    SHA1

    c0f7f85753bb351c51dd8e36ca2366a3b24c73ba

    SHA256

    e8e3550084cf30e16b16216266bc73b07c1a05bbfd94ee3f645122d3d167d7e6

    SHA512

    2fbf32b38852def53891a73b9b33f33de96ca09102baa8c37f02d1b3d5076b26d2a32f2e79aab1009dc5b2464abf50c956c797ba4321fd37ea13900753a1d182

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI13042\api-ms-win-core-localization-l1-2-0.dll
    Filesize

    20KB

    MD5

    55902b92bbbca7a2d11a946297f583e6

    SHA1

    b6158f009d98a98ed2e56d377f9c4b6323b852fc

    SHA256

    2dea4ae5df0f7daa37e26dd0f9232f867884f57e850aa85062594b54f3a81e98

    SHA512

    85e0df8a390260e4e0cc0a9372dfd3c55464486812926775a5f9f5767157b88783e03701b1f1c28f34e822b21ea7436c3e8270df58f8de3ec1b15f68b633f4fd

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI13042\api-ms-win-core-processthreads-l1-1-1.dll
    Filesize

    18KB

    MD5

    d2eeb9f6789213bfda7fe6bcb2a1540a

    SHA1

    c330267c8abd56c04204deee9aabd566268daf97

    SHA256

    0ec2b6ee5e8ee5ee22b810795d097dd769ef054eb394355eecac1a1fdc18c971

    SHA512

    7795e972f46ec84cb1709354a40684593947cbf6b4df373cd823134a0b2deec7e5dc738a74c13c2accb74c467892d9a2375a96ab85147ae42fadc627a0f7e2cf

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI13042\api-ms-win-core-timezone-l1-1-0.dll
    Filesize

    18KB

    MD5

    f2d0493794b45c6a2629fc9c5c80f832

    SHA1

    12460ab8f625ecd0e0a02b4fa82061c2ff4644b8

    SHA256

    8c2d7b0dca0702b8f1870c9c404f41e00624132b239deb7917096dfed8ca1507

    SHA512

    4f44ea443413c3709c1521de0b9dc5c05ef9a4f853062e44658d7bc54663115afc1f04927797a5406b388cd5c9e226c9fea1f73f0c288999105d9db42fa257e2

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI13042\python310.dll
    Filesize

    4.3MB

    MD5

    deaf0c0cc3369363b800d2e8e756a402

    SHA1

    3085778735dd8badad4e39df688139f4eed5f954

    SHA256

    156cf2b64dd0f4d9bdb346b654a11300d6e9e15a65ef69089923dafc1c71e33d

    SHA512

    5cac1d92af7ee18425b5ee8e7cd4e941a9ddffb4bc1c12bb8aeabeed09acec1ff0309abc41a2e0c8db101fee40724f8bfb27a78898128f8746c8fe01c1631989

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI13042\ucrtbase.dll
    Filesize

    978KB

    MD5

    cca4929ef8dd988d7221ef6ba398f1b5

    SHA1

    1d21e60e56a15038702dc18148be8cecee279890

    SHA256

    4292c29e74d90aef21bbad50e8fe25858c5990846adb629372ca6fd717cd0ca3

    SHA512

    d990d1370201541e7a1e1ec9b68e40a984d0195847010919148d0de80d2a2c51bcccfeeca59087fca95ab410c9e170c4585c8daa1383f1383b98500d797a41ca

    Download Submit