Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
11/06/2024, 04:20
General
-
Target
275e42090d20bdfc4d434c840c1a8240_NeikiAnalytics.exe
-
Size
416KB
-
MD5
275e42090d20bdfc4d434c840c1a8240
-
SHA1
49ff65a1b81255f57ebc408e4d2632e1d6ead542
-
SHA256
1937e58368d011938ba8207b960bd7ebc881ac9e6f09ad25a2e3bdfce255b93c
-
SHA512
936a4f766a516a45840bfc6a75e55e8ac08d5a0e4e5e157b186e9d3397674b69ccb22697bab1f547d33caf27dcc2e6e857363627575c2ee365412fb597715030
-
SSDEEP
6144:AewfUVIhGEY4MBPd/DvQGZl079H0W7cyqCxSngmMBqfycuPbUl0i5cD5J6KE:AeusKGEY4MBPdVY7j0npM4dl0v5JdE
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\275e42090d20bdfc4d434c840c1a8240_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\275e42090d20bdfc4d434c840c1a8240_NeikiAnalytics.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\275e42090d20bdfc4d434c840c1a8240_NeikiAnalytics.exeC:\Users\Admin\AppData\Local\Temp\275e42090d20bdfc4d434c840c1a8240_NeikiAnalytics.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
416KB
MD539ae0d57c52604246ccaacb1806ee7dd
SHA1630db638d35a7450a3fe8650b9056c9eaa13496e
SHA256cc163f09e824744e08d934cdf28ad54bffe5e06e436739fd0d569daa9efb6dbc
SHA5126510c3f5251455fa03ddef2e5d20252bde99feb684640f4df25b3955466f22e41b4f0e2532c26a7d558414d6b869434423ec92cdf6b69bc46b6e0b8e4159390c
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
84KB
-
Filesize
260KB