Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

2fc8a89db6...cs.exe

windows7-x64

10

2fc8a89db6...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2fc8a89db62a4d4d421ae83d83b1f0f371eb9a1bfcf0b06ddd2671f56cadd503_NeikiAnalytics.exe

  • Size

    217KB

  • Sample

    240701-dbg83axdlj

  • MD5

    41de1cb36778004653511524b12fc330

  • SHA1

    483e514fb7e253d5b8600892c6d57b0180d71f0a

  • SHA256

    2fc8a89db62a4d4d421ae83d83b1f0f371eb9a1bfcf0b06ddd2671f56cadd503

  • SHA512

    8faea0f5496ae10ae2091d24dcaa7840d3901de999328b47cb4bb9f6a983a25cb74a08aa7acabace6a9a4e2b2379785c062629df2c1be5a8092bc008dce327cc

  • SSDEEP

    3072:xs0G+jtN7F6R6CIHaaf8XpfeS5pAgYIqGvJ6887lbyMGjXF1kqaholmtbCQVD:GYJNRxCITspfdZMGXF5ahdt3

Score
10/10
persistence

Malware Config

Targets

    • Target

      2fc8a89db62a4d4d421ae83d83b1f0f371eb9a1bfcf0b06ddd2671f56cadd503_NeikiAnalytics.exe

    • Size

      217KB

    • MD5

      41de1cb36778004653511524b12fc330

    • SHA1

      483e514fb7e253d5b8600892c6d57b0180d71f0a

    • SHA256

      2fc8a89db62a4d4d421ae83d83b1f0f371eb9a1bfcf0b06ddd2671f56cadd503

    • SHA512

      8faea0f5496ae10ae2091d24dcaa7840d3901de999328b47cb4bb9f6a983a25cb74a08aa7acabace6a9a4e2b2379785c062629df2c1be5a8092bc008dce327cc

    • SSDEEP

      3072:xs0G+jtN7F6R6CIHaaf8XpfeS5pAgYIqGvJ6887lbyMGjXF1kqaholmtbCQVD:GYJNRxCITspfdZMGXF5ahdt3

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks