Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

0631786ef4...cs.exe

windows7-x64

10

0631786ef4...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0631786ef4fba3134f8446d61c925cb651f7e1f4ac7bae256c4ec729901249ab_NeikiAnalytics.exe

  • Size

    219KB

  • Sample

    240629-2a315s1fjk

  • MD5

    5031609cd7dde276ed5f8eb15b982780

  • SHA1

    5ca37a517d9e5728961d782afeeab5807146d309

  • SHA256

    0631786ef4fba3134f8446d61c925cb651f7e1f4ac7bae256c4ec729901249ab

  • SHA512

    b6c3f1d588ba2f9c2d6843257e261fbd590ec2fa9710a55765fe258dd00363d96c665f5023e2dc8aa59c22cfe0060a4f0f8ac2fa3d6574b8000dd240b03eadf7

  • SSDEEP

    6144:XJyXTccrzXnEzDOO0aDD4PCxdXXwSfYrwB:XJCpfXAOOdDD4PCxdXXwSfYr

Score
10/10
persistence

Malware Config

Targets

    • Target

      0631786ef4fba3134f8446d61c925cb651f7e1f4ac7bae256c4ec729901249ab_NeikiAnalytics.exe

    • Size

      219KB

    • MD5

      5031609cd7dde276ed5f8eb15b982780

    • SHA1

      5ca37a517d9e5728961d782afeeab5807146d309

    • SHA256

      0631786ef4fba3134f8446d61c925cb651f7e1f4ac7bae256c4ec729901249ab

    • SHA512

      b6c3f1d588ba2f9c2d6843257e261fbd590ec2fa9710a55765fe258dd00363d96c665f5023e2dc8aa59c22cfe0060a4f0f8ac2fa3d6574b8000dd240b03eadf7

    • SSDEEP

      6144:XJyXTccrzXnEzDOO0aDD4PCxdXXwSfYrwB:XJCpfXAOOdDD4PCxdXXwSfYr

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks