Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    03/06/2024, 21:17

General

  • Target

    039acb9c3c1051fcffd1debf81b95760_NeikiAnalytics.exe

  • Size

    73KB

  • MD5

    039acb9c3c1051fcffd1debf81b95760

  • SHA1

    f79dd25024b54f8b786fb06018c59d83ba910ac5

  • SHA256

    11ec5d0f2bd67d8f63c1e7bbaeb8f8c513427119010e5862c2416d42376dedd6

  • SHA512

    eeaa9559b88f1d3b3a5721da32605e282c57c06ab95ca4bdf0b95d57b47eb9b73bf0d4d87e822818fb70b9ba40f1f5ef15002650bc5612e5a90ce73ed3a82927

  • SSDEEP

    1536:1K7ylw2jlA6WBRCJKObnTNBbJ6I4WMJvdDlQDhI5erKT3FK:c7H6rbTNSImvplQVIQ0K

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Drops file in System32 directory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\039acb9c3c1051fcffd1debf81b95760_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\039acb9c3c1051fcffd1debf81b95760_NeikiAnalytics.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in System32 directory
    PID:2848
    • C:\Windows\SysWOW64\ouxvoaroof.exe
      "C:\Windows\SysWOW64\ouxvoaroof.exe"
      2⤵
      • Executes dropped EXE
      PID:1388

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Windows\SysWOW64\ouxvoaroof.exe

    Filesize

    70KB

    MD5

    83a55cdf3abc968c883079cb8872152b

    SHA1

    fb6b388734833e93357eec172e4054b1db24482a

    SHA256

    072132b0b767411d937be6d32838d4bfb431c51fdfe5c02053d4ad5f2ed5c7d7

    SHA512

    ab5744b64e6b861949f2ceb1d4cbd3663e1467b23735f02c4b862704960d2f38735eaf6a73c83985621128741498d0ffc7ed0d48bb0d4cb1b47b1699335be650

  • memory/2848-5-0x0000000000400000-0x0000000000403000-memory.dmp

    Filesize

    12KB