Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

78ddbe87b8...cs.exe

windows7-x64

10

78ddbe87b8...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    78ddbe87b84f73fc0b0346d76983bcfedbf90e2c98c736cc15ab6d7838349e1d_NeikiAnalytics.exe

  • Size

    477KB

  • Sample

    240627-lzdjsavfpg

  • MD5

    a2161737c3a9746e416cb402ced24550

  • SHA1

    eac9d07e94b38cfafcf0ddb654858b99657e9015

  • SHA256

    78ddbe87b84f73fc0b0346d76983bcfedbf90e2c98c736cc15ab6d7838349e1d

  • SHA512

    12628e477a42c42a52ab26811862d4543b744e22d252919d3dbe530a3611b0c35241c9ff5a693eab0901352d0df3bc639631b994c127b678161f45cf4acef5d0

  • SSDEEP

    6144:w5hmR9oBn/TNId/1fon/T2oI0YokOsfY7Uony:w5hfNIVy2oIvPKO

Score
10/10
persistence

Malware Config

Targets

    • Target

      78ddbe87b84f73fc0b0346d76983bcfedbf90e2c98c736cc15ab6d7838349e1d_NeikiAnalytics.exe

    • Size

      477KB

    • MD5

      a2161737c3a9746e416cb402ced24550

    • SHA1

      eac9d07e94b38cfafcf0ddb654858b99657e9015

    • SHA256

      78ddbe87b84f73fc0b0346d76983bcfedbf90e2c98c736cc15ab6d7838349e1d

    • SHA512

      12628e477a42c42a52ab26811862d4543b744e22d252919d3dbe530a3611b0c35241c9ff5a693eab0901352d0df3bc639631b994c127b678161f45cf4acef5d0

    • SSDEEP

      6144:w5hmR9oBn/TNId/1fon/T2oI0YokOsfY7Uony:w5hfNIVy2oIvPKO

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks