Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

ad35dcff37...cs.exe

windows7-x64

10

ad35dcff37...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ad35dcff37314853dbf0650372bf5f1fee1670598ffef97f350a3f3fd3e5f0e3_NeikiAnalytics.exe

  • Size

    96KB

  • Sample

    240629-qmqe2a1epp

  • MD5

    80df1dceff9ec2f81be45329ac73c730

  • SHA1

    0ebec0724679027f7103f3ad1b9dbfee3082a870

  • SHA256

    ad35dcff37314853dbf0650372bf5f1fee1670598ffef97f350a3f3fd3e5f0e3

  • SHA512

    d9cb9c2042afac4e21b12998a2a93b2370cc43c971780fca97f7f3be8b72fb0aacd12826dd8edc9a53982ebc90fc3c633cf7877a43617eef8c2e3043ca6bbf8f

  • SSDEEP

    1536:Pi4D0IFf4G2egCUqkNyH8/Lx/A1OYzT32Lk1WNPXuhiTMuZXGTIVefVDkryyAyqX:p0IFh2egCUIHM/A1OYfca2PXuhuXGQmV

Score
10/10
persistence

Malware Config

Targets

    • Target

      ad35dcff37314853dbf0650372bf5f1fee1670598ffef97f350a3f3fd3e5f0e3_NeikiAnalytics.exe

    • Size

      96KB

    • MD5

      80df1dceff9ec2f81be45329ac73c730

    • SHA1

      0ebec0724679027f7103f3ad1b9dbfee3082a870

    • SHA256

      ad35dcff37314853dbf0650372bf5f1fee1670598ffef97f350a3f3fd3e5f0e3

    • SHA512

      d9cb9c2042afac4e21b12998a2a93b2370cc43c971780fca97f7f3be8b72fb0aacd12826dd8edc9a53982ebc90fc3c633cf7877a43617eef8c2e3043ca6bbf8f

    • SSDEEP

      1536:Pi4D0IFf4G2egCUqkNyH8/Lx/A1OYzT32Lk1WNPXuhiTMuZXGTIVefVDkryyAyqX:p0IFh2egCUIHM/A1OYfca2PXuhuXGQmV

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks