Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

5a1b0ac5f9...cs.exe

windows7-x64

10

5a1b0ac5f9...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5a1b0ac5f9a18c931c958818b102d21f6ade39dfbe815e97120bc67541062d36_NeikiAnalytics.exe

  • Size

    64KB

  • Sample

    240625-nlx3daxand

  • MD5

    645c40160f0742fad3a2c424227ff4e0

  • SHA1

    e68d54336608aa26755d1e730852d2792d170685

  • SHA256

    5a1b0ac5f9a18c931c958818b102d21f6ade39dfbe815e97120bc67541062d36

  • SHA512

    d08b7bf96d1d3a785ada944706d81046591ae98020c683b46d26823b4235e2e586db0ba7c57d145f096e314b92b12fe552fb05154178d6c05e6a321a216895cc

  • SSDEEP

    1536:f4zrRZBzLOAmDrbbjZFHHLqjI0FRZuYDPf:f2RnzLQTmFRZuY7f

Score
10/10
persistence

Malware Config

Targets

    • Target

      5a1b0ac5f9a18c931c958818b102d21f6ade39dfbe815e97120bc67541062d36_NeikiAnalytics.exe

    • Size

      64KB

    • MD5

      645c40160f0742fad3a2c424227ff4e0

    • SHA1

      e68d54336608aa26755d1e730852d2792d170685

    • SHA256

      5a1b0ac5f9a18c931c958818b102d21f6ade39dfbe815e97120bc67541062d36

    • SHA512

      d08b7bf96d1d3a785ada944706d81046591ae98020c683b46d26823b4235e2e586db0ba7c57d145f096e314b92b12fe552fb05154178d6c05e6a321a216895cc

    • SSDEEP

      1536:f4zrRZBzLOAmDrbbjZFHHLqjI0FRZuYDPf:f2RnzLQTmFRZuY7f

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks