Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

5cdebc6c94...cs.exe

windows7-x64

7

5cdebc6c94...cs.exe

windows10-2004-x64

9

Analysis

  • max time kernel
    119s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    26/05/2024, 18:21

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5cdebc6c94f1f55a77d4e65683d9ee20_NeikiAnalytics.exe

  • Size

    393KB

  • MD5

    5cdebc6c94f1f55a77d4e65683d9ee20

  • SHA1

    695e8844a9eb471aae1a860eebfd54ca2da6b2ee

  • SHA256

    9a99471f898c034091d309f00504bd5b2030a1503e31ec4978275f940d34b53e

  • SHA512

    8a0ec16ca563e4b069f329db00b22f9440b760602b9d72cace6c65c3d40d498dc27f4820e021378336f9ce662a3d8622544e0aa5b149fabbb183cf7ee584b89c

  • SSDEEP

    6144:RqKvb0CYJ973e+eKZ0VBFTlAOB6pcq+HpFeHPgsHsSYafq8g2Og:vvbxYX7Z0VdAzpcqapMvgzS/Jl

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Drops file in System32 directory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5cdebc6c94f1f55a77d4e65683d9ee20_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\5cdebc6c94f1f55a77d4e65683d9ee20_NeikiAnalytics.exe"
    1⤵
    • Drops file in System32 directory
    PID:2808
    • C:\Users\Admin\AppData\Local\Temp\_ConfigSecurityPolicy.exe
      "_ConfigSecurityPolicy.exe"
      2⤵
      • Executes dropped EXE
      PID:2220
    • C:\Windows\SysWOW64\Zombie.exe
      "C:\Windows\system32\Zombie.exe"
      2⤵
        PID:2248

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\_ConfigSecurityPolicy.exe
      Filesize

      304KB

      MD5

      a2ff144973a98d241d129081fa9baa6b

      SHA1

      7db942775d84fe782e85390c0ddd1b1ef61617b1

      SHA256

      1cc8e44c620067448bdd2fa88f9ff3a3c64b9a3f06b51c4116ab73376a48bc0a

      SHA512

      c71abb7c0ad554d5f1a5e324163763c6ff5476d37145092c69f213973278c7899818a3809a80323184eaedcbd45f9f5a6acd73d776dc617d32ededc89f84a303

      Download Submit