Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

23851ba43d...cs.exe

windows7-x64

10

23851ba43d...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    23851ba43dc6d675c52d97c55ebdce0bee85974c92f61cf0ad441c5b1b7d9608_NeikiAnalytics

  • Size

    182KB

  • Sample

    240521-kh7kvseh6y

  • MD5

    1f0c7b2f49d27fe3ede3aae6c3df3770

  • SHA1

    2d9b594f1b8a4bd3cf8fcd7933574a738e6f74d6

  • SHA256

    23851ba43dc6d675c52d97c55ebdce0bee85974c92f61cf0ad441c5b1b7d9608

  • SHA512

    0dad7f686e99d6bf171f349352c2b5c14f4201429e947de11991c314d05aca733d7c8a116576ace95af756b67e07154213162f6705939418e64ed314103a609f

  • SSDEEP

    1536:WuYqr94/tztXpEZo5916xNnepUbC2L77nguPw9uVgA53+RrKJs2zjFS3ldkBOLLk:WuYyO8Zo5/q9vj77nguPnVgA53+GpOc

Score
10/10
persistence

Malware Config

Targets

    • Target

      23851ba43dc6d675c52d97c55ebdce0bee85974c92f61cf0ad441c5b1b7d9608_NeikiAnalytics

    • Size

      182KB

    • MD5

      1f0c7b2f49d27fe3ede3aae6c3df3770

    • SHA1

      2d9b594f1b8a4bd3cf8fcd7933574a738e6f74d6

    • SHA256

      23851ba43dc6d675c52d97c55ebdce0bee85974c92f61cf0ad441c5b1b7d9608

    • SHA512

      0dad7f686e99d6bf171f349352c2b5c14f4201429e947de11991c314d05aca733d7c8a116576ace95af756b67e07154213162f6705939418e64ed314103a609f

    • SSDEEP

      1536:WuYqr94/tztXpEZo5916xNnepUbC2L77nguPw9uVgA53+RrKJs2zjFS3ldkBOLLk:WuYyO8Zo5/q9vj77nguPnVgA53+GpOc

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks