Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics
-
Size
2.0MB
-
Sample
240510-1pfzgsee44
-
MD5
103e76fde9cae0ddd9c130f04ddc91e0
-
SHA1
8d912d99df0e97be05242aaa69002903b9206ee8
-
SHA256
9dfd129af3eb9d1d2fd7d57369053c11c64ed36c5888e6bb3026b3ad978a89a8
-
SHA512
8613c1ea3b97dba1f46d69af30c4cba4f89f86c178d3d4aff26c671b3c2d14ae1767064ae892daefdb7cd54ab44d09d013b65456062de0fff81aca3db3bda1b1
-
SSDEEP
49152:mAph0Q1M8h3GztIvs5hWy3zqy1OCiQFcJFvHZSM8IrijcX:muLNQziE5hWEz3OCiQFoHZ+IGjcX
Behavioral task
behavioral1
Sample
103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics
-
Size
2.0MB
-
MD5
103e76fde9cae0ddd9c130f04ddc91e0
-
SHA1
8d912d99df0e97be05242aaa69002903b9206ee8
-
SHA256
9dfd129af3eb9d1d2fd7d57369053c11c64ed36c5888e6bb3026b3ad978a89a8
-
SHA512
8613c1ea3b97dba1f46d69af30c4cba4f89f86c178d3d4aff26c671b3c2d14ae1767064ae892daefdb7cd54ab44d09d013b65456062de0fff81aca3db3bda1b1
-
SSDEEP
49152:mAph0Q1M8h3GztIvs5hWy3zqy1OCiQFcJFvHZSM8IrijcX:muLNQziE5hWEz3OCiQFoHZ+IGjcX
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-