Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    112s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    06/06/2024, 18:51

General

  • Target

    eaf29828e30926e47fc35b590f804050_NeikiAnalytics.exe

  • Size

    29KB

  • MD5

    eaf29828e30926e47fc35b590f804050

  • SHA1

    e82f4cdfc80dd31125d50f4fc260c7e3e7160c53

  • SHA256

    21cee6ad9f6649746abb2a93507baf348dca80ab184f83e461e80c24d7ba328d

  • SHA512

    a81307b6531b937feabd0b24d5bdd55b50fc36ece54f7a71653c086347825d65249db3def2b266b487f94d0b903d168eb2db78ef87eb95ed16eb6834b7a25ceb

  • SSDEEP

    192:tACUADIY0Br5xjL/FAgAQmP1oynLb22vuN6GnN6G0JN:GBt7Br5xjL9AgA71FbhvuNBNqJN

Score
9/10

Malware Config

Signatures

  • Renames multiple (3055) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\eaf29828e30926e47fc35b590f804050_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\eaf29828e30926e47fc35b590f804050_NeikiAnalytics.exe"
    1⤵
    • Drops file in Program Files directory
    PID:1652

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\$Recycle.Bin\S-1-5-21-1298544033-3225604241-2703760938-1000\desktop.ini.tmp

    Filesize

    30KB

    MD5

    483716293014570e560d8ba8e5bd0613

    SHA1

    d332c4534e2ba0b7d7431dde68f2b70d16064f3a

    SHA256

    4140819857b9ff178e49fe963877f84a8586fdfbc1b8e425d568123495c22c10

    SHA512

    e6fd3f7f06c359a90043c5b39efff14e78dbbd9f4eacc4dea12bab0a38c48138df3510ac883beedf643ebbade73abe0d8f436149b42191e0aa70795445a12444

  • C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

    Filesize

    38KB

    MD5

    5f6477520c0fc74cf56955039a3546f6

    SHA1

    1a1c54efbe473caf925d330bd820907be82fa0d9

    SHA256

    c31289ac800e7990371c56164b57f86fc1b967ba427f6ab01cbdd5d9ba558afd

    SHA512

    473b656df321d7c3c9804b05c49bba2973c559ec14ac8cc2d671f67b7f8023e1a67903620d66258e717924b60bb97b1a3a8a1fb45e8e5d3807e9b5e40460f972