Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

a12a1dfc3a...cs.exe

windows7-x64

10

a12a1dfc3a...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a12a1dfc3a087fc77d3b46ddd3b842e0_NeikiAnalytics.exe

  • Size

    96KB

  • Sample

    240523-qbsq1sbg8x

  • MD5

    a12a1dfc3a087fc77d3b46ddd3b842e0

  • SHA1

    8745932879dcd7f9cae9cec50f8dc1acecb9f839

  • SHA256

    a73c3e8d981f4b0e483de46b955a16d085c1cc3fbba0947e80d235c37830f3ef

  • SHA512

    8bd43860e1fda17f44bfb675d1ef3be6347bf592d3cd4254d20514e4509e7f8a521c53817977da40ac35d210fc7934589e9db5b7224fe8c9aa464552d6a71123

  • SSDEEP

    1536:PHyY8aaVJsIrXCVpsXPbV7lsYSlRhcOmVWbohtIySYhrUQVoMdUT+irF:/PaVOIrXCVGXRZsYSlRh0VWkhtIySYh+

Score
10/10
persistence

Malware Config

Targets

    • Target

      a12a1dfc3a087fc77d3b46ddd3b842e0_NeikiAnalytics.exe

    • Size

      96KB

    • MD5

      a12a1dfc3a087fc77d3b46ddd3b842e0

    • SHA1

      8745932879dcd7f9cae9cec50f8dc1acecb9f839

    • SHA256

      a73c3e8d981f4b0e483de46b955a16d085c1cc3fbba0947e80d235c37830f3ef

    • SHA512

      8bd43860e1fda17f44bfb675d1ef3be6347bf592d3cd4254d20514e4509e7f8a521c53817977da40ac35d210fc7934589e9db5b7224fe8c9aa464552d6a71123

    • SSDEEP

      1536:PHyY8aaVJsIrXCVpsXPbV7lsYSlRhcOmVWbohtIySYhrUQVoMdUT+irF:/PaVOIrXCVGXRZsYSlRh0VWkhtIySYh+

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks