Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

6563c2a5af...cs.exe

windows7-x64

10

6563c2a5af...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6563c2a5af62e4f5366abd1a9fea4b50_NeikiAnalytics.exe

  • Size

    64KB

  • Sample

    240530-fkpevagd55

  • MD5

    6563c2a5af62e4f5366abd1a9fea4b50

  • SHA1

    6d85701dd8d6baf64eb25ca2146fea07c353877b

  • SHA256

    5babaa75c536dc59fad09b3cd0020dbec59280ce8408be35bfdce546b3177f28

  • SHA512

    0fe4d67ae2c5df9890b23706cf9950f7f3d1857371fda6d4f3cd9cc9b5e4279a2f825e7ced15661576766aed864770e8b5c7791b4b871dd1f222b9d625a227e5

  • SSDEEP

    768:yG7nyy7tMFsXtMQwvk27jhJdIZmGcs1e+QdctPu3ABDLL2Pl2SKkK7qMqf/1H5NS:yG7yAMFIe1JdGphLZBDLDGvlPnly5VP

Score
10/10
persistence

Malware Config

Targets

    • Target

      6563c2a5af62e4f5366abd1a9fea4b50_NeikiAnalytics.exe

    • Size

      64KB

    • MD5

      6563c2a5af62e4f5366abd1a9fea4b50

    • SHA1

      6d85701dd8d6baf64eb25ca2146fea07c353877b

    • SHA256

      5babaa75c536dc59fad09b3cd0020dbec59280ce8408be35bfdce546b3177f28

    • SHA512

      0fe4d67ae2c5df9890b23706cf9950f7f3d1857371fda6d4f3cd9cc9b5e4279a2f825e7ced15661576766aed864770e8b5c7791b4b871dd1f222b9d625a227e5

    • SSDEEP

      768:yG7nyy7tMFsXtMQwvk27jhJdIZmGcs1e+QdctPu3ABDLL2Pl2SKkK7qMqf/1H5NS:yG7yAMFIe1JdGphLZBDLDGvlPnly5VP

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks