Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
71f160df75b...cs.exe
windows7-x64
71f160df75b...cs.exe
windows10-2004-x64
10$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows7-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3BTAPI.dll
windows7-x64
1BTAPI.dll
windows10-2004-x64
1Epileptolo...ls.pdf
windows7-x64
1Epileptolo...ls.pdf
windows10-2004-x64
1Limean80/M...th.dll
windows7-x64
1Limean80/M...th.dll
windows10-2004-x64
1Opdyrkende...LL.dll
windows7-x64
1Opdyrkende...LL.dll
windows10-2004-x64
1General
-
Target
1f160df75b05e29bc10e44345b4f6e80_NeikiAnalytics
-
Size
582KB
-
Sample
240509-3gjrhsdc31
-
MD5
1f160df75b05e29bc10e44345b4f6e80
-
SHA1
0370aa0ec56c13cce6ae980fbb17573e50cb11cc
-
SHA256
8815e244503f5cdbfbfdda71a58219e0baa627c0986e3638d4aedef87170993b
-
SHA512
5eaa5f311286bc181217cea255418afe1ec989de146b67e90d4470770c18085aa524632fee00a190db52c08131fe6419124085dbd97b545905bc98d2c0206ba8
-
SSDEEP
6144:GtxpfgMigGBfkpJW23fSRuDztOu9YG7lGhqXPd09OH0O+hebWk:5cccvW23fSR0OSYG78i+OH0OjWk
Behavioral task
behavioral1
Sample
1f160df75b05e29bc10e44345b4f6e80_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1f160df75b05e29bc10e44345b4f6e80_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/nsExec.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
BTAPI.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
BTAPI.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
Epileptology103/Bullpout/Stillelsningsprvers125/Signatures Technical Details.pdf
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
Epileptology103/Bullpout/Stillelsningsprvers125/Signatures Technical Details.pdf
Resource
win10v2004-20240426-en
Behavioral task
behavioral11
Sample
Limean80/Milieuforbrydelse/System.Xml.XPath.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
Limean80/Milieuforbrydelse/System.Xml.XPath.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
Opdyrkende/Rodge/Ationsdatoernes/Controller/LutComprDLL.dll
Resource
win7-20240419-en
Behavioral task
behavioral14
Sample
Opdyrkende/Rodge/Ationsdatoernes/Controller/LutComprDLL.dll
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
1f160df75b05e29bc10e44345b4f6e80_NeikiAnalytics
-
Size
582KB
-
MD5
1f160df75b05e29bc10e44345b4f6e80
-
SHA1
0370aa0ec56c13cce6ae980fbb17573e50cb11cc
-
SHA256
8815e244503f5cdbfbfdda71a58219e0baa627c0986e3638d4aedef87170993b
-
SHA512
5eaa5f311286bc181217cea255418afe1ec989de146b67e90d4470770c18085aa524632fee00a190db52c08131fe6419124085dbd97b545905bc98d2c0206ba8
-
SSDEEP
6144:GtxpfgMigGBfkpJW23fSRuDztOu9YG7lGhqXPd09OH0O+hebWk:5cccvW23fSR0OSYG78i+OH0OjWk
Score10/10-
Loads dropped DLL
-
Drops file in System32 directory
-
-
-
Target
$PLUGINSDIR/System.dll
-
Size
12KB
-
MD5
8cf2ac271d7679b1d68eefc1ae0c5618
-
SHA1
7cc1caaa747ee16dc894a600a4256f64fa65a9b8
-
SHA256
6950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
-
SHA512
ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
SSDEEP
192:BenY0qWTlt70IAj/lQ0sEWc/wtYbBH2aDybC7y+XB9IwL:B8+Qlt70Fj/lQRY/9VjjlL
Score3/10 -
-
-
Target
$PLUGINSDIR/nsExec.dll
-
Size
7KB
-
MD5
f27689c513e7d12c7c974d5f8ef710d6
-
SHA1
e305f2a2898d765a64c82c449dfb528665b4a892
-
SHA256
1f18f4126124b0551f3dbcd0fec7f34026f930ca509f04435657cedc32ae8c47
-
SHA512
734e9f3989ee47a86bee16838df7a09353c7fe085a09d77e70d281b21c5477b0b061616e72e8ac8fcb3dda1df0d5152f54dcc4c5a77f90fbf0f857557bf02fbc
-
SSDEEP
96:JpmkmwmHDPVhklfSoRPB+YSvWvZckH69MSz00vQFHhAVvSGYuHnUNy2DCP:J+PVhYfSokvW2CsQFBAVaGdHnUNR
Score3/10 -
-
-
Target
BTAPI.dll
-
Size
120KB
-
MD5
2a9f5e92945474ccab19f7e523c6a403
-
SHA1
a825be6ce762451213330c6fa1d537ff87988f36
-
SHA256
29b9e7069fc04add56b11140a2b83191747b727f4fccb7aec7091212a6717fd1
-
SHA512
3890abbb9f04afc95a6df202e6d868ca5016e8d6f89b9bfe68be3755613781e97d762fe55f31180bcd55807abb25829f547e47762b1902e6d6300780d2df312f
-
SSDEEP
3072:a7PXzmBJm3FAvASl7Ae5xzg6S2tAESXBWHOqK4FllviJLJ56wREdww2qxBHW0Cvr:cG9mhx0vl5U1jH
Score1/10 -
-
-
Target
Epileptology103/Bullpout/Stillelsningsprvers125/Signatures Technical Details.pdf
-
Size
21KB
-
MD5
d0be41edd7564340d9aa2434269f2609
-
SHA1
3fe9689346c71cbe9ecb6da52a51e641857613ff
-
SHA256
37e4a7883be617ad2400e67a773ba10c9cb6545d96dd154ff33cfb84f7f6af38
-
SHA512
3fff27c8407af09ee22d0cfa801a05cc6ac361fb7ccccb40578db89b4994529218cd1adf93bf79abf68a00a7f5792c7e720d1a1f12335c7fb135ee174fec9c8c
-
SSDEEP
384:d1X/fQ3n90oj7Xsp986OzNautr6MHkjSIu+w0X6FgRLjYWiv8ku:dV/fQ390ojTspHOBasBkjHu+w0qiJYsf
Score1/10 -
-
-
Target
Limean80/Milieuforbrydelse/System.Xml.XPath.dll
-
Size
15KB
-
MD5
c6dcf83ee4ef5eafca43e0dbc67bdea0
-
SHA1
dcc0bd07ce7c1752eb06c478474794729b008be9
-
SHA256
a532c9cd98bec571baed3e7c027c6537524d61ed0557ca8f7bfb7f79a2589548
-
SHA512
89263cc3a094adf172dfd74373150294d040d5c08fae0f539c66ef9fa653af2e1594b5bfb8eb293d72678ce7c2fb5ab1ba967a64c175ec366a1448b8e5071a30
-
SSDEEP
384:5hlkiAQD2MWAvWqldz/uPHRN7rwcOWF//dJR9zt46:BiQ57ltMccOWF//dj9zn
Score1/10 -
-
-
Target
Opdyrkende/Rodge/Ationsdatoernes/Controller/LutComprDLL.dll
-
Size
121KB
-
MD5
bc445160886173a6bd809be240dec89c
-
SHA1
be0c4ec02d21577ce1cb0ae6a65288ddc87d1151
-
SHA256
613284a74b389b1792bcb31fdf9f26b5810f77f8e60ad413ad1c9b96a9f3a1b4
-
SHA512
dfda71f2b156f6d57c6f6fa6f2b1fd70d84364846a4f67e71f8623224cb62e72674b74db03e5992286cbaeef41cc6e3cc18b0ad581b1c98b78070785f662a05d
-
SSDEEP
3072:YylbN77/STkT7cKDsep9fpfEGKfj06SIBfsOOJlNE5X4:JbN77zT7ceZ9RfEhLD7QmX4
Score1/10 -