Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

b0a407f47b...cs.exe

windows7-x64

10

b0a407f47b...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b0a407f47b9d3a71fc9827571ae49945bddda5642ecd9ae9fc756a83ee164baa_NeikiAnalytics.exe

  • Size

    364KB

  • Sample

    240629-sj2p1ashnm

  • MD5

    2b2ff5c7e9de4502b5646f86fee3d920

  • SHA1

    e1371d1fee841370d81ea29dacd9958837c4b280

  • SHA256

    b0a407f47b9d3a71fc9827571ae49945bddda5642ecd9ae9fc756a83ee164baa

  • SHA512

    97153b53eb945c311f7cd4b37b47deac2bed4dc8b5427e6a195713c5e7a613f2dd2553559e4dc79e68b8bcb49f95e3cca29c1f6705677a16d414a838abc54544

  • SSDEEP

    3072:NedvviI6onErw24ho1mtye3lFDrFDHZtOga24ho1mtye3lfTl0vFXo+RoaFcyjBq:YCxZr9sFj5tT3sF70/HwnrsFj5tT3sF

Score
10/10
persistence

Malware Config

Targets

    • Target

      b0a407f47b9d3a71fc9827571ae49945bddda5642ecd9ae9fc756a83ee164baa_NeikiAnalytics.exe

    • Size

      364KB

    • MD5

      2b2ff5c7e9de4502b5646f86fee3d920

    • SHA1

      e1371d1fee841370d81ea29dacd9958837c4b280

    • SHA256

      b0a407f47b9d3a71fc9827571ae49945bddda5642ecd9ae9fc756a83ee164baa

    • SHA512

      97153b53eb945c311f7cd4b37b47deac2bed4dc8b5427e6a195713c5e7a613f2dd2553559e4dc79e68b8bcb49f95e3cca29c1f6705677a16d414a838abc54544

    • SSDEEP

      3072:NedvviI6onErw24ho1mtye3lFDrFDHZtOga24ho1mtye3lfTl0vFXo+RoaFcyjBq:YCxZr9sFj5tT3sF70/HwnrsFj5tT3sF

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks