Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
26/06/2024, 00:47
General
-
Target
2e72126bc57c825479b605f5a70451a72ae8a09d1b9fce9d1f709b8aa1c30bbe_NeikiAnalytics.exe
-
Size
384KB
-
MD5
88bc45c910bb6ea8f09db5e7b1e4e1f0
-
SHA1
229f994212264b91dc5e4edbe3ef615d342acbab
-
SHA256
2e72126bc57c825479b605f5a70451a72ae8a09d1b9fce9d1f709b8aa1c30bbe
-
SHA512
c38865cb5ca94b9ace850ed56553c7aa11862e7b4cecf6d1345f03ef35dbaeced1f34088e0b08f522894ea6cc45bac27bc3807d69492dae65537775efd0e7513
-
SSDEEP
6144:FW+fbNzV3u7kCmbPXkn0LGOPh6jTFRbf0eN0W7cyqCxSngmMBqfycuPbUl0i5cDj:F1F7jUyGgh6XFRbf0ez0npM4dl0v5Jz
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2e72126bc57c825479b605f5a70451a72ae8a09d1b9fce9d1f709b8aa1c30bbe_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2e72126bc57c825479b605f5a70451a72ae8a09d1b9fce9d1f709b8aa1c30bbe_NeikiAnalytics.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\2e72126bc57c825479b605f5a70451a72ae8a09d1b9fce9d1f709b8aa1c30bbe_NeikiAnalytics.exeC:\Users\Admin\AppData\Local\Temp\2e72126bc57c825479b605f5a70451a72ae8a09d1b9fce9d1f709b8aa1c30bbe_NeikiAnalytics.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
MD52526422e125f65a268101c4ea73e64c0
SHA16329739e49072abb70e00025a3d5c39bfcee6a9a
SHA256a5f27146dbfd300df7810ee3d7e14f4b8d555bca0f8e5ce4f43a1248322b63ef
SHA512401a84fc1d6121f364f5ba2e7a5aae1319eb17994a6f39897e2fe85a0c339bbb47e38dbccb89530156adac9807544c5aca6f87fa32451ce0b20b22d03bfe426d
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
84KB
-
Filesize
256KB