Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

1

322e5a0f77...cs.exe

windows7-x64

8

322e5a0f77...cs.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    322e5a0f773010dfd2165cd3b00986c0_NeikiAnalytics.exe

  • Size

    5.3MB

  • Sample

    240607-dqnz6ahh38

  • MD5

    322e5a0f773010dfd2165cd3b00986c0

  • SHA1

    e42b60b12ca5477920e447de087587eb9b3285fb

  • SHA256

    cd0b5bf86e89959eaaa79ce2c1d30eb619a28850fdddab64bded9dfe7971fad2

  • SHA512

    e101cda9f5a8fcf0e52489e385ffc88055fcc22792ebb6b7655b032f526d2002e52710ff1dd5a03b1f2b3a18e8b9ec0ee11f75ed431b308e37008186f90bc632

  • SSDEEP

    98304:xRjPz9KDzUU8O5/B/LJ25E9SVh86sS3TRknQ3ss2MApp9meypA3cPDu7:xFKoU8O5/b2XViSjX310SeyGc7u7

Score
8/10
evasionexecutionpersistenceupx

Malware Config

Targets

    • Target

      322e5a0f773010dfd2165cd3b00986c0_NeikiAnalytics.exe

    • Size

      5.3MB

    • MD5

      322e5a0f773010dfd2165cd3b00986c0

    • SHA1

      e42b60b12ca5477920e447de087587eb9b3285fb

    • SHA256

      cd0b5bf86e89959eaaa79ce2c1d30eb619a28850fdddab64bded9dfe7971fad2

    • SHA512

      e101cda9f5a8fcf0e52489e385ffc88055fcc22792ebb6b7655b032f526d2002e52710ff1dd5a03b1f2b3a18e8b9ec0ee11f75ed431b308e37008186f90bc632

    • SSDEEP

      98304:xRjPz9KDzUU8O5/B/LJ25E9SVh86sS3TRknQ3ss2MApp9meypA3cPDu7:xFKoU8O5/b2XViSjX310SeyGc7u7

    Score
    8/10
    evasionexecutionpersistenceupx

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

      execution

    • Creates new service(s)

      persistenceexecution

    • Stops running service(s)

      evasionexecution

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks