Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
0fcd3cb7f4278d0abed80403acfc5bf0_NEIKI
-
Size
204KB
-
Sample
240508-xjggaacd87
-
MD5
0fcd3cb7f4278d0abed80403acfc5bf0
-
SHA1
629b6832c8ba8b03b42e69aa98c147746da3dff0
-
SHA256
22c41ec6e5e974258c69c14f5562f58cd0baca603b28f731a0c8754219e57af9
-
SHA512
02a0933b0f9678a34ad0366d87ba4b40b7712ef477ce43c08207b83e8ceceae0221511d8ba728e3c5cfd46b0d1cd080b6091be4b442e48dbcebcf4bf5422e0ad
-
SSDEEP
3072:Fm9W81R0tQ9nLHbB9W0c1TqECzR/mkSYGrl9ymgYUW8O:8MAR4QxL7B9W0c1RCzR/fSmlY
Static task
static1
Behavioral task
behavioral1
Sample
0fcd3cb7f4278d0abed80403acfc5bf0_NEIKI.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0fcd3cb7f4278d0abed80403acfc5bf0_NEIKI.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
0fcd3cb7f4278d0abed80403acfc5bf0_NEIKI
-
Size
204KB
-
MD5
0fcd3cb7f4278d0abed80403acfc5bf0
-
SHA1
629b6832c8ba8b03b42e69aa98c147746da3dff0
-
SHA256
22c41ec6e5e974258c69c14f5562f58cd0baca603b28f731a0c8754219e57af9
-
SHA512
02a0933b0f9678a34ad0366d87ba4b40b7712ef477ce43c08207b83e8ceceae0221511d8ba728e3c5cfd46b0d1cd080b6091be4b442e48dbcebcf4bf5422e0ad
-
SSDEEP
3072:Fm9W81R0tQ9nLHbB9W0c1TqECzR/mkSYGrl9ymgYUW8O:8MAR4QxL7B9W0c1RCzR/fSmlY
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-