Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
23/05/2024, 07:44
General
-
Target
2af4b474f685490a9ef4329316ee45a0_NeikiAnalytics.exe
-
Size
192KB
-
MD5
2af4b474f685490a9ef4329316ee45a0
-
SHA1
aabe6742f530401f1a1e9816a03d4c7b6a1b88d9
-
SHA256
7e01312a92178539584bcd84eaa208a96b7536943e3c7c53d9815a42e01cfed6
-
SHA512
f5927fad8725412a6131e706fc360114f974b7be994d29ca596d9d768878af142e087c921ede9be094373433e3115478fb019c54668b9c23f771e6bc4c7af3a1
-
SSDEEP
3072:XeZbbJiKBV3OpX/6caafxR1USdiou6tgG36Usow9iXkKW7zDIbKrd/K0s7:XeZ5iKs4af3kZ6rsouiYzHp/K1
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2af4b474f685490a9ef4329316ee45a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2af4b474f685490a9ef4329316ee45a0_NeikiAnalytics.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\2af4b474f685490a9ef4329316ee45a0_NeikiAnalytics.exeC:\Users\Admin\AppData\Local\Temp\2af4b474f685490a9ef4329316ee45a0_NeikiAnalytics.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
192KB
MD559a74a656ad69959516a6e1e93a6d0cb
SHA1d926c70e3aa38ffa208871b03de0b0a8c84d25d9
SHA256e0abd70ee3c24b88bdc176b1b7e28cb428fcd9f0f2ee1a7da69cab22b04549db
SHA512717e4fae83fdc45a9fb2d13395b2eb97943feea99f0b849da6a7fc6241fc9d31e55e6ad4e7fb87c24820ae59038f92e88a843a21f0ae3aa41f5a4dfb63231888
-
Filesize
220KB
-
Filesize
104KB
-
Filesize
220KB
-
Filesize
220KB
-
Filesize
220KB
-
Filesize
220KB