Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
22/05/2024, 22:52
Static task
static1
Behavioral task
behavioral1
Sample
513a0fd306cde8d747ac3e5428a40e10_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
513a0fd306cde8d747ac3e5428a40e10_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
513a0fd306cde8d747ac3e5428a40e10_NeikiAnalytics.exe
-
Size
71KB
-
MD5
513a0fd306cde8d747ac3e5428a40e10
-
SHA1
1a4d586ae52465ebe99d33c4bc9d775f740f140a
-
SHA256
afb7a583eaba9767701463eef15ccebea7bb312d2cdd0b51496c48fb5919ca78
-
SHA512
e5184394f9f42a0199cb3d3d220655edccf4e93993dc13d2750f1b40cdee4ad7536f4b34f05d55313eef637839711c6ad3d0bce89df3650c8b2fcf3054f7a054
-
SSDEEP
768:hZZ6Zyf9SDcnZARkcr07JP9Xdg7SV5bWNy1IMakG98N+hayyyOHoW5iKTNGNXftQ:1gDcIJ0JlXuGEUaWMnHcJOVs
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
pid Process 784 oukxemip-anat.exe -
Loads dropped DLL 1 IoCs
pid Process 2352 513a0fd306cde8d747ac3e5428a40e10_NeikiAnalytics.exe -
Drops file in System32 directory 2 IoCs
description ioc Process File created C:\Windows\SysWOW64\oukxemip-anat.exe 513a0fd306cde8d747ac3e5428a40e10_NeikiAnalytics.exe File opened for modification C:\Windows\SysWOW64\oukxemip-anat.exe 513a0fd306cde8d747ac3e5428a40e10_NeikiAnalytics.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\513a0fd306cde8d747ac3e5428a40e10_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\513a0fd306cde8d747ac3e5428a40e10_NeikiAnalytics.exe"1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:2352 -
C:\Windows\SysWOW64\oukxemip-anat.exe"C:\Windows\SysWOW64\oukxemip-anat.exe"2⤵
- Executes dropped EXE
PID:784
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD53d40e8a80aed45cd199d7f372fdf3bd8
SHA1a9c1d6a413c9464bc5af40201ae9b3990e287497
SHA256cf0ddf07b82351ae560bf093107812db9542e3f6753edd70a43ab7a9982ffce5
SHA512fcd454bbf5868a4445b355cf3cf5304fd4176d21181319701a4862c9eca1aebd71dcba98eb16cd3bb6b3f15e7b57d90bbfde9dc2ce4294aaeb1e2619e877b800