Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

1461203a29...cs.exe

windows7-x64

10

1461203a29...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1461203a29d11512ea7aa494520f8f06887a75875bd4f16add9f0c84dfd3e504_NeikiAnalytics

  • Size

    135KB

  • Sample

    240521-hnljgacb3w

  • MD5

    5cbab93cd47c2f95ac9fd8045514f039

  • SHA1

    b0926376cf2fae189476d8dfd76281dcbca87c76

  • SHA256

    1461203a29d11512ea7aa494520f8f06887a75875bd4f16add9f0c84dfd3e504

  • SHA512

    7ac0932721ced4a7205eac499632a6200128c897f1ede91f9140bd6828fa68f1b78e12f0aa6f29b6ac9b8fc0b417a3c36773e7d30986e9e7b040d02d748f742c

  • SSDEEP

    1536:4fsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbVBcjjjjjjjjjjjjZ:4VqoCl/YgjxEufVU0TbTyDDal7g

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      1461203a29d11512ea7aa494520f8f06887a75875bd4f16add9f0c84dfd3e504_NeikiAnalytics

    • Size

      135KB

    • MD5

      5cbab93cd47c2f95ac9fd8045514f039

    • SHA1

      b0926376cf2fae189476d8dfd76281dcbca87c76

    • SHA256

      1461203a29d11512ea7aa494520f8f06887a75875bd4f16add9f0c84dfd3e504

    • SHA512

      7ac0932721ced4a7205eac499632a6200128c897f1ede91f9140bd6828fa68f1b78e12f0aa6f29b6ac9b8fc0b417a3c36773e7d30986e9e7b040d02d748f742c

    • SSDEEP

      1536:4fsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbVBcjjjjjjjjjjjjZ:4VqoCl/YgjxEufVU0TbTyDDal7g

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks