Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    01/07/2024, 13:34

General

  • Target

    55bd93fee5810afc92c1bcca8ea2428a8b3cad0e888844d0afac8d8149c6caa2_NeikiAnalytics.exe

  • Size

    83KB

  • MD5

    9b2c71a268d92932ca8de0cbf3740aa0

  • SHA1

    c0e860559fe4c250371f8f4ff8e7b6e687cacab1

  • SHA256

    55bd93fee5810afc92c1bcca8ea2428a8b3cad0e888844d0afac8d8149c6caa2

  • SHA512

    f0a74a50bf144daa118c4b195f51859991ccdeb3b58137de29a0daf7793da836928ab8381642ae758579054013d377bf30ed13a3bb8407f203d091f31e301dbe

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+tK:LJ0TAz6Mte4A+aaZx8EnCGVut

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 7 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\55bd93fee5810afc92c1bcca8ea2428a8b3cad0e888844d0afac8d8149c6caa2_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\55bd93fee5810afc92c1bcca8ea2428a8b3cad0e888844d0afac8d8149c6caa2_NeikiAnalytics.exe"
    1⤵
      PID:1688

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\rifaien2-KpaYELUNkQbxNQTc.exe

      Filesize

      83KB

      MD5

      84d6f37def9a148c2db72e61c6cb0340

      SHA1

      07cbb4cd6bd28fa8d7ac43b2f19fa5e893e85205

      SHA256

      de9802b0935efb596fff1fe5349fc57b7585414ac69cef5f7f68282ce8b7d19e

      SHA512

      9d136d2bcfaf070b5365721e3fb4a36283e3d79118a34670e4ef3883bb2c1e6422beccd17019fd1951c28b3597fa6e4ff3ac331a5fa13862bb9d3aa0e3b31985

    • memory/1688-0-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/1688-1-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/1688-5-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/1688-14-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/1688-21-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/1688-28-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB