Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
03/06/2024, 20:27
General
-
Target
40a65dec3cc49e522bb9391385543660_NeikiAnalytics.exe
-
Size
37KB
-
MD5
40a65dec3cc49e522bb9391385543660
-
SHA1
b702cf7eae65082e6d11b6c7091e203f31199f8c
-
SHA256
26127d66c5c0cf89941115349cc42d9385547ac71c439371eea493070868d050
-
SHA512
6c161d5419523ec8fa25eb4e716b5e69968c435d25a3274632b36cf01beb5a2eb11b12833f3225950f134e38e75fe5582c83e29e87e17fae0f6018870d03cf30
-
SSDEEP
768:U5ZFhzgxucryOmJQqO3VhDWiNlW+O96QhlqNU9jz8W3:U57mucrFmJQqO3VhDWiC+i6QnjYM
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\40a65dec3cc49e522bb9391385543660_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\40a65dec3cc49e522bb9391385543660_NeikiAnalytics.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\hhcbrnaff.exe"C:\Users\Admin\AppData\Local\Temp\hhcbrnaff.exe"2⤵
- Executes dropped EXE
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
37KB
MD517966e68e85232289a69fb67c7585227
SHA10c43aa7a0a4f0fac7ceb39fc5dab950b941f6556
SHA2566a4f768eac167d9b80b4bd2503af52eb15d6542bbf3bbd2924375609d80aa075
SHA512981bb6525c65eb238eec2f4cd47d47e4000328c0486afbdc68353d411fda7bb85d33d90780d47060aaf7bc97f4064b894b3e2bd89c082cac471e6678045519dc
-
Filesize
40KB
-
Filesize
24KB
-
Filesize
40KB
-
Filesize
24KB
-
Filesize
40KB