Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

265493bd46...cs.exe

windows7-x64

7

265493bd46...cs.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    140s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    25/06/2024, 03:00

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    265493bd46a1a3ac04dd30d4a772e9ae92c062766ce3d73897e5e2ccb95fe5cd_NeikiAnalytics.exe

  • Size

    83KB

  • MD5

    12972988b1f313b7d3778898b17e8ba0

  • SHA1

    ffc07ac799df4bc263dea0322f275c3230b6fbd9

  • SHA256

    265493bd46a1a3ac04dd30d4a772e9ae92c062766ce3d73897e5e2ccb95fe5cd

  • SHA512

    b3924e3a4eba96837197e9bf7d33f0feaf63369f6e4ede182d0e5defe1ba51f92009a265637f8c9d992c9f32cd75dfe2ab6736d4772ed59c9ceaeaf128054f7d

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+gK:LJ0TAz6Mte4A+aaZx8EnCGVug

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 7 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Processes

  • C:\Users\Admin\AppData\Local\Temp\265493bd46a1a3ac04dd30d4a772e9ae92c062766ce3d73897e5e2ccb95fe5cd_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\265493bd46a1a3ac04dd30d4a772e9ae92c062766ce3d73897e5e2ccb95fe5cd_NeikiAnalytics.exe"
    1⤵
      PID:2420

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\rifaien2-ybDVVG3Ba7KgFMho.exe
      Filesize

      83KB

      MD5

      4db976f95b5b453923f93df551bb5280

      SHA1

      4bcd6d35add143ee2347dca1a4f233417941b412

      SHA256

      b444df036502839ed76cd73bde921795c17175fa469a5263b093f61f7493abab

      SHA512

      edf3b841633498b272df618bd179271bcd2080b635a51b61883758df4fda3cf2d38da1404196ad980d39ad977cf65e1192acfe8b913c061d6ba4a0c7522022ef

      Download Submit

    • memory/2420-0-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

      Download

    • memory/2420-1-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

      Download

    • memory/2420-7-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

      Download

    • memory/2420-14-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

      Download

    • memory/2420-21-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

      Download

    • memory/2420-28-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

      Download