Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
-
submitted
27/05/2024, 13:45
General
-
Target
f5cdc057619ca7b4f25cefbc49c91c90_NeikiAnalytics.exe
-
Size
384KB
-
MD5
f5cdc057619ca7b4f25cefbc49c91c90
-
SHA1
5d5898d102e9474ddeb39714044b5577cc65a0ca
-
SHA256
3ab73e06622c59e81a408ee714d020df78295a513e76a7d47640380d16127baa
-
SHA512
68b40bc8ce042742f6ce6cae21dc7142e3a9f063d276f3e64607f2de75b71bda26cc172b647b0105bc0bafdd14eea011717a9e814dd404c385d1b1e0890b2805
-
SSDEEP
6144:UiE2L8reMjn+og0B18sPmBSiesGLVR6olrbc67dANNG8zieDB73sU9wEie+/:HCeM00bn6Irbcol8zie973wEE
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f5cdc057619ca7b4f25cefbc49c91c90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\f5cdc057619ca7b4f25cefbc49c91c90_NeikiAnalytics.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\f5cdc057619ca7b4f25cefbc49c91c90_NeikiAnalytics.exeC:\Users\Admin\AppData\Local\Temp\f5cdc057619ca7b4f25cefbc49c91c90_NeikiAnalytics.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
MD5b10eb8cc0e90838e410e7f42ac457403
SHA13b8485b9ebadc1e948f9d39c4a52d4fe5760d33b
SHA256eadfa75af356f05df2666afaada716337fe7bb292a632af6ed46a247500d473c
SHA512df0b19701dbee339660419590ee511cb82a7b6cbc554cfa546cab64bc7678bad1da4ee3ee08139e28675bf202d0e89aebe4eb8ddcb4352e98c80dd72beaad0fc
-
Filesize
248KB
-
Filesize
104KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB