Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

7

35285914ed...cs.exe

windows7-x64

10

35285914ed...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    35285914ed3fa2bdc80f8372558d3db0_NeikiAnalytics.exe

  • Size

    51KB

  • Sample

    240604-gpea4sfd51

  • MD5

    35285914ed3fa2bdc80f8372558d3db0

  • SHA1

    78cbf599f238a0340da5d4778abbb9ae01749a28

  • SHA256

    90edf3f1ddb06aa7d4894d5c09537cc4acced2dcb1fd15ecc5960e0fa07c36c3

  • SHA512

    327d96d30f4c1c8a260269f9b29645627db805bdccde55b8b974e70b7e9b20cb7e71ef9f674ea1ece93fceb6fc141277a9524b8ec51055ec661e759aa7aaa2b2

  • SSDEEP

    768:nNAGAkIo/juokwoL7627d9rIiClJAxiFkJT22euOiya6lHOYxY0x0KS3x:nNJb/HkwoLe29UjQ4wqQOLIMVnS3x

Score
10/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      35285914ed3fa2bdc80f8372558d3db0_NeikiAnalytics.exe

    • Size

      51KB

    • MD5

      35285914ed3fa2bdc80f8372558d3db0

    • SHA1

      78cbf599f238a0340da5d4778abbb9ae01749a28

    • SHA256

      90edf3f1ddb06aa7d4894d5c09537cc4acced2dcb1fd15ecc5960e0fa07c36c3

    • SHA512

      327d96d30f4c1c8a260269f9b29645627db805bdccde55b8b974e70b7e9b20cb7e71ef9f674ea1ece93fceb6fc141277a9524b8ec51055ec661e759aa7aaa2b2

    • SSDEEP

      768:nNAGAkIo/juokwoL7627d9rIiClJAxiFkJT22euOiya6lHOYxY0x0KS3x:nNJb/HkwoLe29UjQ4wqQOLIMVnS3x

    Score
    10/10
    evasionpersistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Drops file in Drivers directory

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks