Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

1793ac3601...cs.exe

windows7-x64

10

1793ac3601...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1793ac36017222a1fd774af947202d00_NeikiAnalytics.exe

  • Size

    148KB

  • Sample

    240525-csph2abb9t

  • MD5

    1793ac36017222a1fd774af947202d00

  • SHA1

    f25d63ab8d9a04feb00706d53b407b85b1e966ff

  • SHA256

    cd7825d52cdb1f275c3b24be99fddc66f774984737aa18295d84864722583e0c

  • SHA512

    266edae9fabe6e8316a4b9ba7bef61e104bfea8fa75d010d1e296329eb12cec78a20c29cf0100d68af12a660d2163d08bd4ff86d26daebf1975bc599086b0c2c

  • SSDEEP

    1536:nrel3XWo2VxyMcCbncBVZWX5HzvCxGYCBbxTNyThXPW:rC3XWoixXDncBV4X5HzKxGYCzTNyTJW

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      1793ac36017222a1fd774af947202d00_NeikiAnalytics.exe

    • Size

      148KB

    • MD5

      1793ac36017222a1fd774af947202d00

    • SHA1

      f25d63ab8d9a04feb00706d53b407b85b1e966ff

    • SHA256

      cd7825d52cdb1f275c3b24be99fddc66f774984737aa18295d84864722583e0c

    • SHA512

      266edae9fabe6e8316a4b9ba7bef61e104bfea8fa75d010d1e296329eb12cec78a20c29cf0100d68af12a660d2163d08bd4ff86d26daebf1975bc599086b0c2c

    • SSDEEP

      1536:nrel3XWo2VxyMcCbncBVZWX5HzvCxGYCBbxTNyThXPW:rC3XWoixXDncBV4X5HzKxGYCzTNyTJW

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Drops file in Drivers directory

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks