Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

27af82a381...cs.exe

windows7-x64

10

27af82a381...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    27af82a381c25a8537ea0ab8d0026506222a5b7e0caf0f469644fa6b5574266b_NeikiAnalytics.exe

  • Size

    896KB

  • Sample

    240625-dq98dsxfqc

  • MD5

    16b7f9526b28a1bd8662bddd7bfce460

  • SHA1

    57a2bf019337f3ad6fd102fcf0cc42caf7461023

  • SHA256

    27af82a381c25a8537ea0ab8d0026506222a5b7e0caf0f469644fa6b5574266b

  • SHA512

    c66f1491abe7c4bbe7f5aeb70519a215b688159f2cd649cbf710c4a701466ad7e36f0e39ec5ef9740b0490a48b752580cde01802e096e7a797d7e9ea61faa6f4

  • SSDEEP

    12288:abYVFMusMH0QiRLsR4P377a20R01F50+5:abYVILX3a20R0v50+5

Score
10/10
persistence

Malware Config

Targets

    • Target

      27af82a381c25a8537ea0ab8d0026506222a5b7e0caf0f469644fa6b5574266b_NeikiAnalytics.exe

    • Size

      896KB

    • MD5

      16b7f9526b28a1bd8662bddd7bfce460

    • SHA1

      57a2bf019337f3ad6fd102fcf0cc42caf7461023

    • SHA256

      27af82a381c25a8537ea0ab8d0026506222a5b7e0caf0f469644fa6b5574266b

    • SHA512

      c66f1491abe7c4bbe7f5aeb70519a215b688159f2cd649cbf710c4a701466ad7e36f0e39ec5ef9740b0490a48b752580cde01802e096e7a797d7e9ea61faa6f4

    • SSDEEP

      12288:abYVFMusMH0QiRLsR4P377a20R01F50+5:abYVILX3a20R0v50+5

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks