Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    21/05/2024, 08:55

General

  • Target

    264516d8302de077871881364947792ddda11c57f294197f83a1c85a77c68636_NeikiAnalytics.exe

  • Size

    83KB

  • MD5

    bc8e762955d150fa04c9c362ed6d63d0

  • SHA1

    f4d004da6fdf22dca5017efdc16b0d6ab3f3411f

  • SHA256

    264516d8302de077871881364947792ddda11c57f294197f83a1c85a77c68636

  • SHA512

    4780741c9c058bdf83d4da683b921ff511eaec355c716993a0e7dde374530001e7b942cdfb0cccb7004419c73b95f7bc2917ee1c07a471e16fcf2610163634f1

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+RK:LJ0TAz6Mte4A+aaZx8EnCGVuR

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 7 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\264516d8302de077871881364947792ddda11c57f294197f83a1c85a77c68636_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\264516d8302de077871881364947792ddda11c57f294197f83a1c85a77c68636_NeikiAnalytics.exe"
    1⤵
      PID:2992

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\rifaien2-CI91Nro6s0NOe2fv.exe

      Filesize

      83KB

      MD5

      10687971d3937b371cff3234edca09be

      SHA1

      5e3514639635043cccd0459c6768b2a538ec98a6

      SHA256

      01b35625221da3a456c74eb5c85d97b97bf2df5bce5ee8f79f750c0a77730cb2

      SHA512

      ce3bccf9c668e2cad0ae04d8b0fc551f2ab8b383e36ad85e378a1bb932152c9cca54c07c502ac2528ed58648fc421c51987b5efc78da567f57c24031573ee8ab

    • memory/2992-0-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2992-1-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2992-7-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2992-14-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2992-21-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2992-28-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB