Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

d15f162143...cs.exe

windows7-x64

10

d15f162143...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d15f162143ecf24dc8033a92b7af21b0_NeikiAnalytics.exe

  • Size

    206KB

  • Sample

    240604-mjs5zadh32

  • MD5

    d15f162143ecf24dc8033a92b7af21b0

  • SHA1

    e2a17ff3f08464b64e40188ebe2603fbac3ff169

  • SHA256

    9b488fea68a6f383be27b1506d5d4b7e73840126037578d97b992aada9a4f5a4

  • SHA512

    5e47ded8736d64252a0e2e12be55e432f73e5b6f23a6ad6ce7bd01e8b5b4e4c3e25cdcd38cccfe1e140472f6b3c3d6f44a62122a279f18da208fd387f1efee74

  • SSDEEP

    3072:5vEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6unLx:5vEN2U+T6i5LirrllHy4HUcMQY6Kx

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      d15f162143ecf24dc8033a92b7af21b0_NeikiAnalytics.exe

    • Size

      206KB

    • MD5

      d15f162143ecf24dc8033a92b7af21b0

    • SHA1

      e2a17ff3f08464b64e40188ebe2603fbac3ff169

    • SHA256

      9b488fea68a6f383be27b1506d5d4b7e73840126037578d97b992aada9a4f5a4

    • SHA512

      5e47ded8736d64252a0e2e12be55e432f73e5b6f23a6ad6ce7bd01e8b5b4e4c3e25cdcd38cccfe1e140472f6b3c3d6f44a62122a279f18da208fd387f1efee74

    • SSDEEP

      3072:5vEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6unLx:5vEN2U+T6i5LirrllHy4HUcMQY6Kx

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks