Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

085cec3d53...cs.exe

windows7-x64

10

085cec3d53...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    085cec3d530f3bc9e5446085363a0710_NeikiAnalytics.exe

  • Size

    186KB

  • Sample

    240601-25rllaag87

  • MD5

    085cec3d530f3bc9e5446085363a0710

  • SHA1

    74442f607e72d28f716f387d061757ea73cb7c24

  • SHA256

    47f73b8e28790007e56cca805c98655fad56e1fbb1b4313e213fb39fb42c5ef3

  • SHA512

    271ae09fa70fe22e9c901f94ed18507bc03a61475870bfbb125d4c9bc5f8f3f6e836fe40c8aee5e8266acd5a071a827110f17c9d0dae0a7f1c8cfcc816c9ccd1

  • SSDEEP

    3072:ATMBROp/PFhFv+Y4H1vkF3VOMC4uMhZpMdoVBRDI+Vvlg3vG:AgYFhF+Jk/4AcgHuv

Score
10/10
persistence

Malware Config

Targets

    • Target

      085cec3d530f3bc9e5446085363a0710_NeikiAnalytics.exe

    • Size

      186KB

    • MD5

      085cec3d530f3bc9e5446085363a0710

    • SHA1

      74442f607e72d28f716f387d061757ea73cb7c24

    • SHA256

      47f73b8e28790007e56cca805c98655fad56e1fbb1b4313e213fb39fb42c5ef3

    • SHA512

      271ae09fa70fe22e9c901f94ed18507bc03a61475870bfbb125d4c9bc5f8f3f6e836fe40c8aee5e8266acd5a071a827110f17c9d0dae0a7f1c8cfcc816c9ccd1

    • SSDEEP

      3072:ATMBROp/PFhFv+Y4H1vkF3VOMC4uMhZpMdoVBRDI+Vvlg3vG:AgYFhF+Jk/4AcgHuv

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks