Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3418f8996240828462f20e98b25ddf0c767a118046486be0945b07ef09a6ea79_NeikiAnalytics

  • Size

    19KB

  • Sample

    240521-maal9shf79

  • MD5

    fe2c9c26d70c7a4d2c46b024a6a12a40

  • SHA1

    e1a3da5e395e75524693dddd8aef938aa02161d5

  • SHA256

    3418f8996240828462f20e98b25ddf0c767a118046486be0945b07ef09a6ea79

  • SHA512

    0099e9f97d3813326f445e804405e9fb39bee28b6bae7baddb228ae762ce02930ed04aff20fe500ee5c823b7b325031a3b47d04b81fe1f02db4e0dc764bca309

  • SSDEEP

    384:g58AcUoUQKNRYELxQUHDvmk3E+KDvB77777J77c77c77c72qh5Q0yQGU2LL/:g5BOFKksO1mE9B77777J77c77c77c71G

Score
10/10

Malware Config

Targets

    • Target

      3418f8996240828462f20e98b25ddf0c767a118046486be0945b07ef09a6ea79_NeikiAnalytics

    • Size

      19KB

    • MD5

      fe2c9c26d70c7a4d2c46b024a6a12a40

    • SHA1

      e1a3da5e395e75524693dddd8aef938aa02161d5

    • SHA256

      3418f8996240828462f20e98b25ddf0c767a118046486be0945b07ef09a6ea79

    • SHA512

      0099e9f97d3813326f445e804405e9fb39bee28b6bae7baddb228ae762ce02930ed04aff20fe500ee5c823b7b325031a3b47d04b81fe1f02db4e0dc764bca309

    • SSDEEP

      384:g58AcUoUQKNRYELxQUHDvmk3E+KDvB77777J77c77c77c72qh5Q0yQGU2LL/:g5BOFKksO1mE9B77777J77c77c77c71G

    Score
    10/10
    • Modifies WinLogon for persistence

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks