Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

0ee50e2b86...cs.exe

windows7-x64

10

0ee50e2b86...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0ee50e2b865f5f9ec038ed080deb381ecd72579ed4aa2aa3b041d30d0f191f3c_NeikiAnalytics.exe

  • Size

    94KB

  • Sample

    240629-3tkvcatanj

  • MD5

    d70fdb3c2cc85afe82aba9412ed77fb0

  • SHA1

    093de3c1353160cd77e6c6587d907b47af59a627

  • SHA256

    0ee50e2b865f5f9ec038ed080deb381ecd72579ed4aa2aa3b041d30d0f191f3c

  • SHA512

    ddbf8e5506ff69e2390aae709e7cde239c7c3b42d7e6317bf80d641f79b41c616dcd36f544291553667b5c6dc78d9dabb90d7e9d16d3342f754046524efcb2ac

  • SSDEEP

    1536:HjzRGv2ebA5LXvylstxX/KvIyR+mH7IK6QV5pFaf2LXoaIZTJ+7LhkiB0MPiKeEJ:Dz8v2i7YK6QhF54aMU7uihJ5v

Score
10/10
persistence

Malware Config

Targets

    • Target

      0ee50e2b865f5f9ec038ed080deb381ecd72579ed4aa2aa3b041d30d0f191f3c_NeikiAnalytics.exe

    • Size

      94KB

    • MD5

      d70fdb3c2cc85afe82aba9412ed77fb0

    • SHA1

      093de3c1353160cd77e6c6587d907b47af59a627

    • SHA256

      0ee50e2b865f5f9ec038ed080deb381ecd72579ed4aa2aa3b041d30d0f191f3c

    • SHA512

      ddbf8e5506ff69e2390aae709e7cde239c7c3b42d7e6317bf80d641f79b41c616dcd36f544291553667b5c6dc78d9dabb90d7e9d16d3342f754046524efcb2ac

    • SSDEEP

      1536:HjzRGv2ebA5LXvylstxX/KvIyR+mH7IK6QV5pFaf2LXoaIZTJ+7LhkiB0MPiKeEJ:Dz8v2i7YK6QhF54aMU7uihJ5v

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks