Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11/06/2024, 01:51 UTC

General

  • Target

    23315eeff1aaaa973cee3ce590e910f0_NeikiAnalytics.exe

  • Size

    3.3MB

  • MD5

    23315eeff1aaaa973cee3ce590e910f0

  • SHA1

    4568615611c0b014136085b8da7b4addc9dd8cdc

  • SHA256

    5a586d5b020a5b3cb5c10f644de397d95074f429aee31c33a1aa6468e0a6a3dc

  • SHA512

    e246d2fe2bb16539e51b5e1f489bfc8dc3a7a5028d8ca4c026264409906252d479ebbb5a12340ac15993cdeb4fa08f0ba30a39e2bf0daf7d7f1d98467823172c

  • SSDEEP

    98304:exPK8OZZRkfMOYl0u9oUoOe+2ER6mVhPL:exPK828lXuWUDe+xVhT

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\23315eeff1aaaa973cee3ce590e910f0_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\23315eeff1aaaa973cee3ce590e910f0_NeikiAnalytics.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    PID:2884

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2884-0-0x000000013FC20000-0x0000000140BE4000-memory.dmp

    Filesize

    15.8MB

  • memory/2884-1-0x000007FFFFBD0000-0x000007FFFFFA1000-memory.dmp

    Filesize

    3.8MB

  • memory/2884-2-0x000000013FC20000-0x0000000140BE4000-memory.dmp

    Filesize

    15.8MB

  • memory/2884-4-0x000007FFFFBD0000-0x000007FFFFFA1000-memory.dmp

    Filesize

    3.8MB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.