Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

c8a9a3f555...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c8a9a3f5557cbec5bf8f38bfa923a8b0_NeikiAnalytics.exe

  • Size

    5.1MB

  • Sample

    240616-bj8pwashlc

  • MD5

    c8a9a3f5557cbec5bf8f38bfa923a8b0

  • SHA1

    80371a9518c70d8d3019f2f4720d8a5b8190fb06

  • SHA256

    95703940824b8996a682a755b5a96050db3a7de2d12d3f94b59cff4f4a79a8fa

  • SHA512

    ff558a49566cb69a7827e51f5bd93f10db044bc1b835dca50db961f950f416deabd37ad19ea077a03b0a17ca8e4103be8f63c9d3ef7c9b8a4f6260a885979cab

  • SSDEEP

    98304:PyENIIut+hl5p19HLOaFAIH3TcLWGO7d09GZkrCRfRCUyuFC4Qmd1:KEN2tm5p3uU3TcLWGO7djZkrC5RMQ/

Score
7/10
evasionspywarestealertrojan

Malware Config

Targets

    • Target

      c8a9a3f5557cbec5bf8f38bfa923a8b0_NeikiAnalytics.exe

    • Size

      5.1MB

    • MD5

      c8a9a3f5557cbec5bf8f38bfa923a8b0

    • SHA1

      80371a9518c70d8d3019f2f4720d8a5b8190fb06

    • SHA256

      95703940824b8996a682a755b5a96050db3a7de2d12d3f94b59cff4f4a79a8fa

    • SHA512

      ff558a49566cb69a7827e51f5bd93f10db044bc1b835dca50db961f950f416deabd37ad19ea077a03b0a17ca8e4103be8f63c9d3ef7c9b8a4f6260a885979cab

    • SSDEEP

      98304:PyENIIut+hl5p19HLOaFAIH3TcLWGO7d09GZkrCRfRCUyuFC4Qmd1:KEN2tm5p3uU3TcLWGO7djZkrC5RMQ/

    Score
    7/10
    evasionspywarestealertrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks whether UAC is enabled

      evasiontrojan

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks