Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

8218f0d8a4...cs.exe

windows7-x64

1

8218f0d8a4...cs.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    125s
  • max time network
    131s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/06/2024, 11:24 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    8218f0d8a40492d4231077036d781e7f19776e22702c540329afd71a4386d3ce_NeikiAnalytics.exe

  • Size

    638KB

  • MD5

    3aae98c834760a560805b4089a81b7c0

  • SHA1

    9bd65f676b64a813d15e133d47fddc46f273f3c7

  • SHA256

    8218f0d8a40492d4231077036d781e7f19776e22702c540329afd71a4386d3ce

  • SHA512

    aafe4f28a652a2514b4739b5dbd06be01a13314329ac23cb27db6d2942160f225cdacdb219759f196ad1ae9495095a31f1d0c4c64673bbd7e13e745e6e0bf86d

  • SSDEEP

    6144:VEbaWnBUC595gE31RlKjT0+MEbrJY6GiS1zP:VoCCPojBMGY641zP

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\8218f0d8a40492d4231077036d781e7f19776e22702c540329afd71a4386d3ce_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\8218f0d8a40492d4231077036d781e7f19776e22702c540329afd71a4386d3ce_NeikiAnalytics.exe"
    1⤵
      PID:4808
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4124,i,5711962389779687290,1245653010537220991,262144 --variations-seed-version --mojo-platform-channel-handle=4040 /prefetch:8
      1⤵
        PID:2624

      Network

      • flag-us
        DNS
        133.211.185.52.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        133.211.185.52.in-addr.arpa
        IN PTR
        Response
      • flag-us
        DNS
        136.32.126.40.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        136.32.126.40.in-addr.arpa
        IN PTR
        Response
      • flag-us
        DNS
        58.55.71.13.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        58.55.71.13.in-addr.arpa
        IN PTR
        Response
      • flag-us
        DNS
        28.118.140.52.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        28.118.140.52.in-addr.arpa
        IN PTR
        Response
      • flag-us
        DNS
        157.123.68.40.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        157.123.68.40.in-addr.arpa
        IN PTR
        Response
      • flag-us
        DNS
        18.31.95.13.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        18.31.95.13.in-addr.arpa
        IN PTR
        Response
      • flag-us
        DNS
        35.15.31.184.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        35.15.31.184.in-addr.arpa
        IN PTR
        Response
        35.15.31.184.in-addr.arpa
        IN PTR
        a184-31-15-35deploystaticakamaitechnologiescom
      • flag-us
        DNS
        14.227.111.52.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        14.227.111.52.in-addr.arpa
        IN PTR
        Response
      • flag-us
        DNS
        80.90.14.23.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        80.90.14.23.in-addr.arpa
        IN PTR
        Response
        80.90.14.23.in-addr.arpa
        IN PTR
        a23-14-90-80deploystaticakamaitechnologiescom
      • flag-us
        DNS
        82.90.14.23.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        82.90.14.23.in-addr.arpa
        IN PTR
        Response
        82.90.14.23.in-addr.arpa
        IN PTR
        a23-14-90-82deploystaticakamaitechnologiescom
      • 52.142.223.178:80
        46 B
         1
      • 8.8.8.8:53
        133.211.185.52.in-addr.arpa
        dns
        73 B
         147 B
         1
        1

        DNS Request

        133.211.185.52.in-addr.arpa

      • 8.8.8.8:53
        136.32.126.40.in-addr.arpa
        dns
        72 B
         158 B
         1
        1

        DNS Request

        136.32.126.40.in-addr.arpa

      • 8.8.8.8:53
        58.55.71.13.in-addr.arpa
        dns
        70 B
         144 B
         1
        1

        DNS Request

        58.55.71.13.in-addr.arpa

      • 8.8.8.8:53
        28.118.140.52.in-addr.arpa
        dns
        72 B
         158 B
         1
        1

        DNS Request

        28.118.140.52.in-addr.arpa

      • 8.8.8.8:53
        157.123.68.40.in-addr.arpa
        dns
        72 B
         146 B
         1
        1

        DNS Request

        157.123.68.40.in-addr.arpa

      • 8.8.8.8:53
        18.31.95.13.in-addr.arpa
        dns
        70 B
         144 B
         1
        1

        DNS Request

        18.31.95.13.in-addr.arpa

      • 8.8.8.8:53
        35.15.31.184.in-addr.arpa
        dns
        71 B
         135 B
         1
        1

        DNS Request

        35.15.31.184.in-addr.arpa

      • 8.8.8.8:53
        14.227.111.52.in-addr.arpa
        dns
        72 B
         158 B
         1
        1

        DNS Request

        14.227.111.52.in-addr.arpa

      • 8.8.8.8:53
        80.90.14.23.in-addr.arpa
        dns
        70 B
         133 B
         1
        1

        DNS Request

        80.90.14.23.in-addr.arpa

      • 8.8.8.8:53
        82.90.14.23.in-addr.arpa
        dns
        70 B
         133 B
         1
        1

        DNS Request

        82.90.14.23.in-addr.arpa

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      We care about your privacy.

      This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.