Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
16/06/2024, 04:28
General
-
Target
d55f64eff29081c82c5c1d59aeebc440_NeikiAnalytics.exe
-
Size
320KB
-
MD5
d55f64eff29081c82c5c1d59aeebc440
-
SHA1
e483dc8e819f5c08e5d5f753ed92b554173984d8
-
SHA256
c82ce8e1cbf4d7fe3a27e9a91bbd5299150bea3ad5a1d076d47b8d30defc0f74
-
SHA512
36f25fb3383e62279aad0d8604fd9526f44fed1967ba5678be93b4cc224137d2cff1817e45bcec0a9458dbd85208bb34c5a98b853e82fb0e415ed329ead4bc58
-
SSDEEP
6144:V9LMpkzlKOpR8pKCjYYLU3g/OFX9aLisM+NeOV40saiigCX:HLMp3KR8pVYYqTX9aLisvNeOVQ5zCX
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d55f64eff29081c82c5c1d59aeebc440_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d55f64eff29081c82c5c1d59aeebc440_NeikiAnalytics.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\d55f64eff29081c82c5c1d59aeebc440_NeikiAnalytics.exeC:\Users\Admin\AppData\Local\Temp\d55f64eff29081c82c5c1d59aeebc440_NeikiAnalytics.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
320KB
MD586753728adc68786d2eccbe41431e608
SHA1335e1c697deb695ffa96baf0ac76241501051f35
SHA256f6506cc55f19f3cf6c967d7a19f736643c22f777b5babed138089afe1dd7de6f
SHA51222a5c0530c4966eda62b884daf56ff527670797b28bff89c6f298b169aa64c444948bd1ef2e1e59875233ea8eae7b84dd8b7b9e101ef279c1d1a55c58ee30d40
-
Filesize
264KB
-
Filesize
104KB
-
Filesize
264KB
-
Filesize
264KB
-
Filesize
264KB
-
Filesize
264KB