Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

6a53ee5479...cs.exe

windows7-x64

10

6a53ee5479...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6a53ee547961f6b8ffd9d62fa2ff3331d6d0330bc8f6de6d2141c56ad6df9d72_NeikiAnalytics.exe

  • Size

    94KB

  • Sample

    240620-q6cnaavfkj

  • MD5

    2ea2f1950888f8995f5317c3ea307f10

  • SHA1

    6f046fb6eb1553c48241c6b2c675c0922392a73c

  • SHA256

    6a53ee547961f6b8ffd9d62fa2ff3331d6d0330bc8f6de6d2141c56ad6df9d72

  • SHA512

    6bf56cf0d491486e8fcf082eb2984aa954e268f3c27871639173d89fcc321f90a271a5cde6ffc7b11cfcfc62300475df2a0b131f4236129b2cb8ea86de8a2ea2

  • SSDEEP

    1536:L5gLyIsx9sfNsIZeY3AUtqNWVxme3eRX2LgaIZTJ+7LhkiB0MPiKeEAgv:L5gLyxx1NExvi8gaMU7uihJ5v

Score
10/10
persistence

Malware Config

Targets

    • Target

      6a53ee547961f6b8ffd9d62fa2ff3331d6d0330bc8f6de6d2141c56ad6df9d72_NeikiAnalytics.exe

    • Size

      94KB

    • MD5

      2ea2f1950888f8995f5317c3ea307f10

    • SHA1

      6f046fb6eb1553c48241c6b2c675c0922392a73c

    • SHA256

      6a53ee547961f6b8ffd9d62fa2ff3331d6d0330bc8f6de6d2141c56ad6df9d72

    • SHA512

      6bf56cf0d491486e8fcf082eb2984aa954e268f3c27871639173d89fcc321f90a271a5cde6ffc7b11cfcfc62300475df2a0b131f4236129b2cb8ea86de8a2ea2

    • SSDEEP

      1536:L5gLyIsx9sfNsIZeY3AUtqNWVxme3eRX2LgaIZTJ+7LhkiB0MPiKeEAgv:L5gLyxx1NExvi8gaMU7uihJ5v

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks