Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

0e9d48a0fe...cs.exe

windows7-x64

10

0e9d48a0fe...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0e9d48a0fea6359a9fde6e606aeedfe877f430fe4772e5a690ba60a362b78c2f_NeikiAnalytics.exe

  • Size

    99KB

  • Sample

    240624-21yjcawhrf

  • MD5

    64595e8d762d8ce266dcb2a7bc2e5d40

  • SHA1

    c33e8ae643b8b5b2aa4d0e9cfb246f8dc9d1a50f

  • SHA256

    0e9d48a0fea6359a9fde6e606aeedfe877f430fe4772e5a690ba60a362b78c2f

  • SHA512

    47ffc77cefd090ccbf36003a8704b2856ff54ec3cbdead18b06792e88814653dd8a19919e424fab6f1251ab4f1eda7279f63af3cb5ecf87d4bfc21802d01c4c6

  • SSDEEP

    1536:2goh6SX5+Qm8MDjjDfrnFhR+C4eDv13lYjaSxxgVYRRQygRvwtycORTRQ6mRQQRg:2VoKANnjSTeygpwoTRBmDRGGurhUI

Score
10/10
persistence

Malware Config

Targets

    • Target

      0e9d48a0fea6359a9fde6e606aeedfe877f430fe4772e5a690ba60a362b78c2f_NeikiAnalytics.exe

    • Size

      99KB

    • MD5

      64595e8d762d8ce266dcb2a7bc2e5d40

    • SHA1

      c33e8ae643b8b5b2aa4d0e9cfb246f8dc9d1a50f

    • SHA256

      0e9d48a0fea6359a9fde6e606aeedfe877f430fe4772e5a690ba60a362b78c2f

    • SHA512

      47ffc77cefd090ccbf36003a8704b2856ff54ec3cbdead18b06792e88814653dd8a19919e424fab6f1251ab4f1eda7279f63af3cb5ecf87d4bfc21802d01c4c6

    • SSDEEP

      1536:2goh6SX5+Qm8MDjjDfrnFhR+C4eDv13lYjaSxxgVYRRQygRvwtycORTRQ6mRQQRg:2VoKANnjSTeygpwoTRBmDRGGurhUI

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks