Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

305c46683b...cs.exe

windows7-x64

7

305c46683b...cs.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    143s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/06/2024, 04:41

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    305c46683b95746e2ec25d71325dd5ccb97e541f41b02d8760382f44f5c73b76_NeikiAnalytics.exe

  • Size

    83KB

  • MD5

    aba61398e23a300ea86f1a02f3669fb0

  • SHA1

    8c4d63f0a7b0a44b96dff28101044ba32ba4ac7f

  • SHA256

    305c46683b95746e2ec25d71325dd5ccb97e541f41b02d8760382f44f5c73b76

  • SHA512

    94d38a19a981f60c33505bc50df46fc46822add9063d6ab3f8c989d7d44b8e7d74c09e162e46bda28aa3517d3f3efac769d98e3245eac63f8cd187b34d8cf6cc

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+3K:LJ0TAz6Mte4A+aaZx8EnCGVu3

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 7 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Processes

  • C:\Users\Admin\AppData\Local\Temp\305c46683b95746e2ec25d71325dd5ccb97e541f41b02d8760382f44f5c73b76_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\305c46683b95746e2ec25d71325dd5ccb97e541f41b02d8760382f44f5c73b76_NeikiAnalytics.exe"
    1⤵
      PID:4616
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4256 --field-trial-handle=2252,i,16022092570067181109,3235558581947505669,262144 --variations-seed-version /prefetch:8
      1⤵
        PID:4660

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\Users\Admin\AppData\Local\Temp\rifaien2-1TFvlQVSJgc3bVv3.exe
        Filesize

        83KB

        MD5

        2ad6fbcdeddb6224591752b65281a627

        SHA1

        3db68eeadf2b244a62b26b7289b37be1346865b8

        SHA256

        c8f139ab57cce69453b56da77c8c7ba55b3946662f804dfc36c154d13c1cd7cb

        SHA512

        edd8951ccc3a9a1ce66a627cb78ee763b13cd009c6fc9310ae9ebae0ba3f9bee836be2fda49525be4827ba3cee48a0f21bb73ad802e48bd19b40509333914661

        Download Submit

      • memory/4616-0-0x0000000000400000-0x000000000042A000-memory.dmp

        Filesize

        168KB

        Download

      • memory/4616-1-0x0000000000400000-0x000000000042A000-memory.dmp

        Filesize

        168KB

        Download

      • memory/4616-8-0x0000000000400000-0x000000000042A000-memory.dmp

        Filesize

        168KB

        Download

      • memory/4616-14-0x0000000000400000-0x000000000042A000-memory.dmp

        Filesize

        168KB

        Download

      • memory/4616-21-0x0000000000400000-0x000000000042A000-memory.dmp

        Filesize

        168KB

        Download

      • memory/4616-28-0x0000000000400000-0x000000000042A000-memory.dmp

        Filesize

        168KB

        Download