Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

46671b8c28...cs.exe

windows7-x64

10

46671b8c28...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    46671b8c2835cfcd4eb2bf83f3f7d4a0_NeikiAnalytics.exe

  • Size

    224KB

  • Sample

    240607-kl71ssde8z

  • MD5

    46671b8c2835cfcd4eb2bf83f3f7d4a0

  • SHA1

    8d8364460bcff84e32a9ead55be251b65b628ad2

  • SHA256

    f15148c30cf48abc24bdd03f6724b8ffc88b30463277367fdb9b85b4a3203c62

  • SHA512

    7a4d9b18a6b506f8b75999a43fd429fb6560de8fd240293c38bb9b084c1088868888b91d6188e1cbbc96638c6818f3a262dfc2bb1a929482cf6b16bf79b10199

  • SSDEEP

    3072:PvEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6uoyVPHSw3u/:PvEN2U+T6i5LirrllHy4HUcMQY6YVP38

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      46671b8c2835cfcd4eb2bf83f3f7d4a0_NeikiAnalytics.exe

    • Size

      224KB

    • MD5

      46671b8c2835cfcd4eb2bf83f3f7d4a0

    • SHA1

      8d8364460bcff84e32a9ead55be251b65b628ad2

    • SHA256

      f15148c30cf48abc24bdd03f6724b8ffc88b30463277367fdb9b85b4a3203c62

    • SHA512

      7a4d9b18a6b506f8b75999a43fd429fb6560de8fd240293c38bb9b084c1088868888b91d6188e1cbbc96638c6818f3a262dfc2bb1a929482cf6b16bf79b10199

    • SSDEEP

      3072:PvEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6uoyVPHSw3u/:PvEN2U+T6i5LirrllHy4HUcMQY6YVP38

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks