Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
132s -
max time network
107s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
01/06/2024, 22:57
General
-
Target
06d9d8cedde716878e768d521aa87a90_NeikiAnalytics.dll
-
Size
2.0MB
-
MD5
06d9d8cedde716878e768d521aa87a90
-
SHA1
dea82eab5371e5d2bedef30eaa8fab7e06cb0288
-
SHA256
99f11de265b93fb5ea9178319536a6b9c2330319055dfde4c3ff00290e1bc6a8
-
SHA512
7e895140f041c05ea167545a3786ce32ef2f4a9315160d8407a694cb54b5caf5b2353fe1eadcbca4159f38bc1afbd2658248b62b98f78a2d7aed0e7155617c84
-
SSDEEP
49152:WqnwXmwq3aDqKoq1axl+h2Y8L0CPvdvs3P2mY8f2IGgi:SmwZDqKoq1ao78L0CPvdgumLBTi
Score
10/10
Malware Config
Signatures
-
Blackmoon, KrBanker
Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
-
Detect Blackmoon payload 3 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\06d9d8cedde716878e768d521aa87a90_NeikiAnalytics.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\06d9d8cedde716878e768d521aa87a90_NeikiAnalytics.dll,#12⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.9MB
-
Filesize
16KB
-
Filesize
296KB
-
Filesize
4.9MB
-
Filesize
4.9MB
-
Filesize
4.9MB
-
Filesize
32KB
-
Filesize
4.9MB
-
Filesize
960KB
-
Filesize
48KB
-
Filesize
64KB
-
Filesize
1.6MB
-
Filesize
4.9MB
-
Filesize
296KB
-
Filesize
4.9MB
-
Filesize
296KB
-
Filesize
296KB