Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

efcc3ebe37...cs.exe

windows7-x64

10

efcc3ebe37...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    efcc3ebe376ef1451f8fbf3c75a3a8b0_NeikiAnalytics.exe

  • Size

    224KB

  • Sample

    240520-m622dsgf47

  • MD5

    efcc3ebe376ef1451f8fbf3c75a3a8b0

  • SHA1

    8e07a9a6042dc623141c025b0d37e7b1a7facf0e

  • SHA256

    3a678c49ecf7d23e8dfe375816b521ef36dbe3a19dc719a1851dc50cc859cc63

  • SHA512

    53c467948da87c8fa10c07920360e82245db874b7c50aca00876028270adeafe921428c784217a98d90a802fbf650217ea8ae185abc875e509e9b4e5baa99151

  • SSDEEP

    3072:y2wixbYt1LviV/gzL20WKFcp9jRV5C/8qy4p2Y7YWlt63cp9jRV5q:/xJgzL2V4cpC0L4AY7YWT63cpq

Score
10/10
persistence

Malware Config

Targets

    • Target

      efcc3ebe376ef1451f8fbf3c75a3a8b0_NeikiAnalytics.exe

    • Size

      224KB

    • MD5

      efcc3ebe376ef1451f8fbf3c75a3a8b0

    • SHA1

      8e07a9a6042dc623141c025b0d37e7b1a7facf0e

    • SHA256

      3a678c49ecf7d23e8dfe375816b521ef36dbe3a19dc719a1851dc50cc859cc63

    • SHA512

      53c467948da87c8fa10c07920360e82245db874b7c50aca00876028270adeafe921428c784217a98d90a802fbf650217ea8ae185abc875e509e9b4e5baa99151

    • SSDEEP

      3072:y2wixbYt1LviV/gzL20WKFcp9jRV5C/8qy4p2Y7YWlt63cp9jRV5q:/xJgzL2V4cpC0L4AY7YWT63cpq

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks