Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

49c7241563...cs.exe

windows7-x64

10

49c7241563...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    49c724156360485dbd818ba780c08c07162225600c1b8f4a7bbbbf41e95a1432_NeikiAnalytics.exe

  • Size

    112KB

  • Sample

    240627-epm7xavajm

  • MD5

    4f0d5f1f42bcbc8cc00489e3e6fe2da0

  • SHA1

    ebf58e601ae9f69c1a769e5bc315e28001a432f0

  • SHA256

    49c724156360485dbd818ba780c08c07162225600c1b8f4a7bbbbf41e95a1432

  • SHA512

    a443fe1c39509e1224de7da92e4d20f67e3d01974493f2f2050738defb6ce624db4cff077ddcd8bf3f55cb53ae630c3ae184bc4541fa0f534f7ae45cfc89e6e5

  • SSDEEP

    3072:e2mo8R8p+WhqZbpgePHizSw4UbfoFeJLCQnFIBOaCUjKaVLjd:TmJR8UbpgePHizSw/foFeJLbnCBbC+nv

Score
10/10
persistence

Malware Config

Targets

    • Target

      49c724156360485dbd818ba780c08c07162225600c1b8f4a7bbbbf41e95a1432_NeikiAnalytics.exe

    • Size

      112KB

    • MD5

      4f0d5f1f42bcbc8cc00489e3e6fe2da0

    • SHA1

      ebf58e601ae9f69c1a769e5bc315e28001a432f0

    • SHA256

      49c724156360485dbd818ba780c08c07162225600c1b8f4a7bbbbf41e95a1432

    • SHA512

      a443fe1c39509e1224de7da92e4d20f67e3d01974493f2f2050738defb6ce624db4cff077ddcd8bf3f55cb53ae630c3ae184bc4541fa0f534f7ae45cfc89e6e5

    • SSDEEP

      3072:e2mo8R8p+WhqZbpgePHizSw4UbfoFeJLCQnFIBOaCUjKaVLjd:TmJR8UbpgePHizSw/foFeJLbnCBbC+nv

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks