Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

44c67f46fb...cs.exe

windows7-x64

10

44c67f46fb...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    44c67f46fb1d3ac9f6f7c4444adcf330_NeikiAnalytics.exe

  • Size

    1.7MB

  • Sample

    240604-kfvtaabd97

  • MD5

    44c67f46fb1d3ac9f6f7c4444adcf330

  • SHA1

    f91e8a96268745527ade0142eb8b1f15c46bbe78

  • SHA256

    2784879f19f2ae52761ef0864e4f69bf03ccba36a5ad3b7c591e1b10f490338c

  • SHA512

    381a8684023a499e0bec401f6ffd4e95d461df7277df08d4cc6eff1b533dea40a0ab821b4eac2877e55372e2be0af0842b9519a98998491c9b1101a2c05d711b

  • SSDEEP

    12288:RbqWOr/Ng1/Nblt01PBExKN4P6IfKTLR+6CwUkEoILClt01PBExKN4P6IfKTLR+r:Zlzlks/6HnEpelks/6HnEpnAc

Score
10/10
persistence

Malware Config

Targets

    • Target

      44c67f46fb1d3ac9f6f7c4444adcf330_NeikiAnalytics.exe

    • Size

      1.7MB

    • MD5

      44c67f46fb1d3ac9f6f7c4444adcf330

    • SHA1

      f91e8a96268745527ade0142eb8b1f15c46bbe78

    • SHA256

      2784879f19f2ae52761ef0864e4f69bf03ccba36a5ad3b7c591e1b10f490338c

    • SHA512

      381a8684023a499e0bec401f6ffd4e95d461df7277df08d4cc6eff1b533dea40a0ab821b4eac2877e55372e2be0af0842b9519a98998491c9b1101a2c05d711b

    • SSDEEP

      12288:RbqWOr/Ng1/Nblt01PBExKN4P6IfKTLR+6CwUkEoILClt01PBExKN4P6IfKTLR+r:Zlzlks/6HnEpelks/6HnEpnAc

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks