Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

3a565e9967...cs.exe

windows7-x64

10

3a565e9967...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3a565e99672d1da160a2f9a44ec5eb2ff0242277e2f28ceade26e8c50cb6fafe_NeikiAnalytics.exe

  • Size

    352KB

  • Sample

    240625-g4whyaxfnk

  • MD5

    4c464d0fb7e657e4710d6ce7778a6980

  • SHA1

    0aede0c693a2e412fca917fe8e2cd5f1b793a144

  • SHA256

    3a565e99672d1da160a2f9a44ec5eb2ff0242277e2f28ceade26e8c50cb6fafe

  • SHA512

    409526cf59389a61b1f89f0f70def65520250a4dd29e7907011774ab79abb970f31945899bd5de54f5b1e370b6e2c346385aa320ca3a0c1b65fa7ed63c6cd53c

  • SSDEEP

    3072:Bpn9GsDFcM/gNNYOJF4EISi/i4gG4nv4H3EzkGSaXiT+9S+a1+s3wNxn:Bpn9GsDdeNN4yjwHL/T7Gsyn

Score
10/10
persistence

Malware Config

Targets

    • Target

      3a565e99672d1da160a2f9a44ec5eb2ff0242277e2f28ceade26e8c50cb6fafe_NeikiAnalytics.exe

    • Size

      352KB

    • MD5

      4c464d0fb7e657e4710d6ce7778a6980

    • SHA1

      0aede0c693a2e412fca917fe8e2cd5f1b793a144

    • SHA256

      3a565e99672d1da160a2f9a44ec5eb2ff0242277e2f28ceade26e8c50cb6fafe

    • SHA512

      409526cf59389a61b1f89f0f70def65520250a4dd29e7907011774ab79abb970f31945899bd5de54f5b1e370b6e2c346385aa320ca3a0c1b65fa7ed63c6cd53c

    • SSDEEP

      3072:Bpn9GsDFcM/gNNYOJF4EISi/i4gG4nv4H3EzkGSaXiT+9S+a1+s3wNxn:Bpn9GsDdeNN4yjwHL/T7Gsyn

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks