Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

9972fc2895...cs.exe

windows7-x64

10

9972fc2895...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9972fc289534a84bc4dbd1713bc42f57eb7f348eeb4d1775d7e59f1bf121718f_NeikiAnalytics.exe

  • Size

    332KB

  • Sample

    240624-wqsmfsvhqh

  • MD5

    c1ee341e0264b2f34afe7babb4ea5d30

  • SHA1

    7304a991c6db852279f3a0dfa17308d53af41c2b

  • SHA256

    9972fc289534a84bc4dbd1713bc42f57eb7f348eeb4d1775d7e59f1bf121718f

  • SHA512

    8d9916558cad8159b525a0ad64aa9e80702a6044ca4cadc72cb50c6d8ef838670156468a66b89aacba65c140035336f90a660a78d9a2ba106e32251fa2d779b9

  • SSDEEP

    6144:nEclq3zhmXiNhr1R6xie8opqXgKTpgtYOWlGmMvkqAlDiyUvpQf4vt74mD50e4mF:5qdmX81RFpogXnV4MlGN1AlDkvXvtxDN

Score
10/10
persistence

Malware Config

Targets

    • Target

      9972fc289534a84bc4dbd1713bc42f57eb7f348eeb4d1775d7e59f1bf121718f_NeikiAnalytics.exe

    • Size

      332KB

    • MD5

      c1ee341e0264b2f34afe7babb4ea5d30

    • SHA1

      7304a991c6db852279f3a0dfa17308d53af41c2b

    • SHA256

      9972fc289534a84bc4dbd1713bc42f57eb7f348eeb4d1775d7e59f1bf121718f

    • SHA512

      8d9916558cad8159b525a0ad64aa9e80702a6044ca4cadc72cb50c6d8ef838670156468a66b89aacba65c140035336f90a660a78d9a2ba106e32251fa2d779b9

    • SSDEEP

      6144:nEclq3zhmXiNhr1R6xie8opqXgKTpgtYOWlGmMvkqAlDiyUvpQf4vt74mD50e4mF:5qdmX81RFpogXnV4MlGN1AlDkvXvtxDN

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks