Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

00d6c737f1...cs.exe

windows7-x64

10

00d6c737f1...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    00d6c737f130cd4f838a121392e565747efab3f2abaf110a07ca855304925f8a_NeikiAnalytics.exe

  • Size

    94KB

  • Sample

    240625-vaqbqathlk

  • MD5

    4566577c16e828091dee2f7a022db290

  • SHA1

    dacb6dec0e293991011140a6ce2456363d14b0dc

  • SHA256

    00d6c737f130cd4f838a121392e565747efab3f2abaf110a07ca855304925f8a

  • SHA512

    d362c59cc7b6019bd65b29f596bc9c87a23b0548f1e2bea44e9898b810be84a43275fbf3ca56d9b0f924160d06d848f7b2f5d669f0e2682eba6cd6a7cfa77467

  • SSDEEP

    1536:5oMANAvJxaN7FlkosAHXmQ0AfA12LVaIZTJ+7LhkiB0MPiKeEAgv:8L7HDfP8mVaMU7uihJ5v

Score
10/10
persistence

Malware Config

Targets

    • Target

      00d6c737f130cd4f838a121392e565747efab3f2abaf110a07ca855304925f8a_NeikiAnalytics.exe

    • Size

      94KB

    • MD5

      4566577c16e828091dee2f7a022db290

    • SHA1

      dacb6dec0e293991011140a6ce2456363d14b0dc

    • SHA256

      00d6c737f130cd4f838a121392e565747efab3f2abaf110a07ca855304925f8a

    • SHA512

      d362c59cc7b6019bd65b29f596bc9c87a23b0548f1e2bea44e9898b810be84a43275fbf3ca56d9b0f924160d06d848f7b2f5d669f0e2682eba6cd6a7cfa77467

    • SSDEEP

      1536:5oMANAvJxaN7FlkosAHXmQ0AfA12LVaIZTJ+7LhkiB0MPiKeEAgv:8L7HDfP8mVaMU7uihJ5v

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks