Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

20b72047e2...cs.exe

windows7-x64

10

20b72047e2...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    20b72047e29d23a8aef6ad3bbb0a833211932b4127b1116c4a3d1468f7d63f6c_NeikiAnalytics.exe

  • Size

    223KB

  • Sample

    240625-cjzyeaverc

  • MD5

    f5cbfb99652a500087000bab9b333480

  • SHA1

    aae06d70866cfbc51667292fd037c78ff68b16c6

  • SHA256

    20b72047e29d23a8aef6ad3bbb0a833211932b4127b1116c4a3d1468f7d63f6c

  • SHA512

    b839ef0a7d800b120905eeac82ba2a2efeb3a6863f0b082896c9899a0f9b39f538c9e53c2c5fb8b95683717baeaa031a98d30fd834c45a8d4ddffcb553ea1f05

  • SSDEEP

    6144:m8M3JzbGWWRs+HcdeZpMCU080SOx8RTG:U5MocZpMChR3i

Score
10/10
persistence

Malware Config

Targets

    • Target

      20b72047e29d23a8aef6ad3bbb0a833211932b4127b1116c4a3d1468f7d63f6c_NeikiAnalytics.exe

    • Size

      223KB

    • MD5

      f5cbfb99652a500087000bab9b333480

    • SHA1

      aae06d70866cfbc51667292fd037c78ff68b16c6

    • SHA256

      20b72047e29d23a8aef6ad3bbb0a833211932b4127b1116c4a3d1468f7d63f6c

    • SHA512

      b839ef0a7d800b120905eeac82ba2a2efeb3a6863f0b082896c9899a0f9b39f538c9e53c2c5fb8b95683717baeaa031a98d30fd834c45a8d4ddffcb553ea1f05

    • SSDEEP

      6144:m8M3JzbGWWRs+HcdeZpMCU080SOx8RTG:U5MocZpMChR3i

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks