Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

2bcb56f367...cs.exe

windows7-x64

10

2bcb56f367...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2bcb56f36799b482d49a95bb39198d2ab8c98ea60a6c42c2e1e015f79fc2888b_NeikiAnalytics.exe

  • Size

    63KB

  • Sample

    240620-ddm74azakn

  • MD5

    1bb531a58f44a31c221ef9b38b6cad60

  • SHA1

    cbc2cb8a326c22ad708c2012eafaca5486cadf16

  • SHA256

    2bcb56f36799b482d49a95bb39198d2ab8c98ea60a6c42c2e1e015f79fc2888b

  • SHA512

    a0c3a154d49e8b9afceb8b50baa29cf14f896d6cbcc913558e7a246b2a502f4a583a1cee2b4338a164c8f59d7f63c8cebd9ce8ecfc268cb184ae4ad88b0758af

  • SSDEEP

    1536:7HWoS4KP0LMrSGnEcjfMM4XW0mtafXedLLBtgaF3y7bJH1juIZo:7HWj5cLMrSGnEcjkM4W/afudLLMa47bU

Score
10/10
persistence

Malware Config

Targets

    • Target

      2bcb56f36799b482d49a95bb39198d2ab8c98ea60a6c42c2e1e015f79fc2888b_NeikiAnalytics.exe

    • Size

      63KB

    • MD5

      1bb531a58f44a31c221ef9b38b6cad60

    • SHA1

      cbc2cb8a326c22ad708c2012eafaca5486cadf16

    • SHA256

      2bcb56f36799b482d49a95bb39198d2ab8c98ea60a6c42c2e1e015f79fc2888b

    • SHA512

      a0c3a154d49e8b9afceb8b50baa29cf14f896d6cbcc913558e7a246b2a502f4a583a1cee2b4338a164c8f59d7f63c8cebd9ce8ecfc268cb184ae4ad88b0758af

    • SSDEEP

      1536:7HWoS4KP0LMrSGnEcjfMM4XW0mtafXedLLBtgaF3y7bJH1juIZo:7HWj5cLMrSGnEcjkM4W/afudLLMa47bU

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks