Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

b6e1ed6f23...cs.exe

windows7-x64

10

b6e1ed6f23...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b6e1ed6f232b7f765a4853ef05b8de82638e46f0f66b8e6a17dcd2ec8283659e_NeikiAnalytics.exe

  • Size

    256KB

  • Sample

    240629-w2bhbawdlk

  • MD5

    37f5ab1d41d846954df70bb4e97a1da0

  • SHA1

    2f786ebacdff49d48c49695a0dac7dac5673cdd9

  • SHA256

    b6e1ed6f232b7f765a4853ef05b8de82638e46f0f66b8e6a17dcd2ec8283659e

  • SHA512

    e92683cca34f99e8f9c1e41da62061ae7dbb0d7e1496205975810243433ca64f14e3b155ba1c96be4510160b077a56b03757d54942a0d558815f6c766d92d4f5

  • SSDEEP

    3072:JQkRk7I2wgJ4kWRfafD2mCUQ1UkY1UkVHe1rUtst76UtoUtFVgtRQ2c+j:xRdVe4kUafDiv1PY1PRe19V+j

Score
10/10
persistence

Malware Config

Targets

    • Target

      b6e1ed6f232b7f765a4853ef05b8de82638e46f0f66b8e6a17dcd2ec8283659e_NeikiAnalytics.exe

    • Size

      256KB

    • MD5

      37f5ab1d41d846954df70bb4e97a1da0

    • SHA1

      2f786ebacdff49d48c49695a0dac7dac5673cdd9

    • SHA256

      b6e1ed6f232b7f765a4853ef05b8de82638e46f0f66b8e6a17dcd2ec8283659e

    • SHA512

      e92683cca34f99e8f9c1e41da62061ae7dbb0d7e1496205975810243433ca64f14e3b155ba1c96be4510160b077a56b03757d54942a0d558815f6c766d92d4f5

    • SSDEEP

      3072:JQkRk7I2wgJ4kWRfafD2mCUQ1UkY1UkVHe1rUtst76UtoUtFVgtRQ2c+j:xRdVe4kUafDiv1PY1PRe19V+j

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks