Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    896190ba23da83338b59b0847dc989e0_NEIKI

  • Size

    100KB

  • Sample

    240508-bg5v7sac4y

  • MD5

    896190ba23da83338b59b0847dc989e0

  • SHA1

    f8f7eec994e8a8996103c141ec625d2ba02a117f

  • SHA256

    8821066d4dc2f88530f75fdc8efcc60f2eb6350e8a50dd78c72579043db5f83b

  • SHA512

    ce7f9152e9476444c5182561f5bdecc73a31131f21c47bb660326982ae03cb993c445dc9a4135d97782499491ae51684593385ffd7e3d136fc8e9ddc3ee3f44a

  • SSDEEP

    1536:tKl0cceBnIkOB+dGrNjjmJ2NuKuFr1M5B4QbCcIO+:teBIkOB++jOWf+

Score
10/10

Malware Config

Targets

    • Target

      896190ba23da83338b59b0847dc989e0_NEIKI

    • Size

      100KB

    • MD5

      896190ba23da83338b59b0847dc989e0

    • SHA1

      f8f7eec994e8a8996103c141ec625d2ba02a117f

    • SHA256

      8821066d4dc2f88530f75fdc8efcc60f2eb6350e8a50dd78c72579043db5f83b

    • SHA512

      ce7f9152e9476444c5182561f5bdecc73a31131f21c47bb660326982ae03cb993c445dc9a4135d97782499491ae51684593385ffd7e3d136fc8e9ddc3ee3f44a

    • SSDEEP

      1536:tKl0cceBnIkOB+dGrNjjmJ2NuKuFr1M5B4QbCcIO+:teBIkOB++jOWf+

    Score
    10/10
    • Modifies visiblity of hidden/system files in Explorer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks