Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

22b586f97b...cs.exe

windows7-x64

10

22b586f97b...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    22b586f97b11010cc55cd503043f180737052dca055c848178329f538c10ade0_NeikiAnalytics.exe

  • Size

    741KB

  • Sample

    240620-bpenzsvfpk

  • MD5

    cc2e1d95832a728f5477c23ce4e53d00

  • SHA1

    79a42c64269f2b69b274fff866230e508845f7be

  • SHA256

    22b586f97b11010cc55cd503043f180737052dca055c848178329f538c10ade0

  • SHA512

    f6cdd1bbedfed9f51341a2de2c4f5fd31090d6855cc9f845279c928dce8899c3c9bed09c397780aa2e13cffb8939e91dc7e02bca0c2af9f6586f582ba20da52c

  • SSDEEP

    12288:ltTuhrf45I8jWtJ8OgL27rd69bk5NCgGhSFB79gYhLIf6EQ9EYcw1Fh:lIt4kt0Kd6F6CNzYhUiEWEYcwp

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      22b586f97b11010cc55cd503043f180737052dca055c848178329f538c10ade0_NeikiAnalytics.exe

    • Size

      741KB

    • MD5

      cc2e1d95832a728f5477c23ce4e53d00

    • SHA1

      79a42c64269f2b69b274fff866230e508845f7be

    • SHA256

      22b586f97b11010cc55cd503043f180737052dca055c848178329f538c10ade0

    • SHA512

      f6cdd1bbedfed9f51341a2de2c4f5fd31090d6855cc9f845279c928dce8899c3c9bed09c397780aa2e13cffb8939e91dc7e02bca0c2af9f6586f582ba20da52c

    • SSDEEP

      12288:ltTuhrf45I8jWtJ8OgL27rd69bk5NCgGhSFB79gYhLIf6EQ9EYcw1Fh:lIt4kt0Kd6F6CNzYhUiEWEYcwp

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks