Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
fcd18c2b1fc9f9c20eeb803658b637a0_NEIKI
-
Size
196KB
-
Sample
240508-hh51xsad53
-
MD5
fcd18c2b1fc9f9c20eeb803658b637a0
-
SHA1
20dcd1d6bf3265aa60ac9c05ade37c9451a951c8
-
SHA256
c72ba1528ff97f3504b92bf7006d5e6326b306afba96139fa1130d49abd74de9
-
SHA512
107748c520ed4e241981557e6a5f8c565e4ad20d9f0a8f7d0de208c40c36a38e691d13fb051dde46b32388e655269c2093e82296d7f0f70e7d2bd776d052ec55
-
SSDEEP
1536:PVqk3NUhJtOaZk1GDGe0Pdb+d6DiUYot00gwX:0VLXzDDypy6DiUru0gk
Static task
static1
Behavioral task
behavioral1
Sample
fcd18c2b1fc9f9c20eeb803658b637a0_NEIKI.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
fcd18c2b1fc9f9c20eeb803658b637a0_NEIKI.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
fcd18c2b1fc9f9c20eeb803658b637a0_NEIKI
-
Size
196KB
-
MD5
fcd18c2b1fc9f9c20eeb803658b637a0
-
SHA1
20dcd1d6bf3265aa60ac9c05ade37c9451a951c8
-
SHA256
c72ba1528ff97f3504b92bf7006d5e6326b306afba96139fa1130d49abd74de9
-
SHA512
107748c520ed4e241981557e6a5f8c565e4ad20d9f0a8f7d0de208c40c36a38e691d13fb051dde46b32388e655269c2093e82296d7f0f70e7d2bd776d052ec55
-
SSDEEP
1536:PVqk3NUhJtOaZk1GDGe0Pdb+d6DiUYot00gwX:0VLXzDDypy6DiUru0gk
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-