Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

6abba7c323...cs.exe

windows7-x64

10

6abba7c323...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6abba7c323f880af6906d4de90382672a6c91ea9abcd06648a44fe879a7d0062_NeikiAnalytics.exe

  • Size

    479KB

  • Sample

    240628-c63b2sxarh

  • MD5

    d53c8c71b4bd3640ad8db443d7286e20

  • SHA1

    c900d4dfbbfa88dec141f6cccf0b18511965bd3b

  • SHA256

    6abba7c323f880af6906d4de90382672a6c91ea9abcd06648a44fe879a7d0062

  • SHA512

    a4e61fa9dcfde40aed6927b5eb13fa93a4f456c2d6afa265eea2547d2a84136537d6120e1e5b5e159a4bed569aa908fcc7d67bbc55dc8617d3a3cab6ed67ebb2

  • SSDEEP

    6144:dsO2A+sycRJ6EQnT2leTLgNPx33fpu2leTLg:2vuRJ6EQ6Q2drQ

Score
10/10
persistence

Malware Config

Targets

    • Target

      6abba7c323f880af6906d4de90382672a6c91ea9abcd06648a44fe879a7d0062_NeikiAnalytics.exe

    • Size

      479KB

    • MD5

      d53c8c71b4bd3640ad8db443d7286e20

    • SHA1

      c900d4dfbbfa88dec141f6cccf0b18511965bd3b

    • SHA256

      6abba7c323f880af6906d4de90382672a6c91ea9abcd06648a44fe879a7d0062

    • SHA512

      a4e61fa9dcfde40aed6927b5eb13fa93a4f456c2d6afa265eea2547d2a84136537d6120e1e5b5e159a4bed569aa908fcc7d67bbc55dc8617d3a3cab6ed67ebb2

    • SSDEEP

      6144:dsO2A+sycRJ6EQnT2leTLgNPx33fpu2leTLg:2vuRJ6EQ6Q2drQ

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks