Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
a8e80107d8d1e64b2e2a1aa7683f3e70_NeikiAnalytics
-
Size
80KB
-
Sample
240510-jwvb1sfb66
-
MD5
a8e80107d8d1e64b2e2a1aa7683f3e70
-
SHA1
cf73995377c48a5e8a22a70d1ec04fa0e25e9891
-
SHA256
8a4909edd9fc35b36e7ae79908cb83dbd4d81629691f2a00667a81f03c8d54a4
-
SHA512
dc5069c8da735c2675fc83a725663ad8f7e9865e7703c6277de39a19888addecd0da02fc6670752d593ccc3cc2fa4b6e395abc6595bc0540b050a2ce8bf037d7
-
SSDEEP
1536:jIr3YriYiUi+H++o1eVlXd+8c0GXmvJJNHjLwl50fP5jy:jyYti0pXd+8c0GWvJ3Hvwl52W
Static task
static1
Behavioral task
behavioral1
Sample
a8e80107d8d1e64b2e2a1aa7683f3e70_NeikiAnalytics.exe
Resource
win7-20231129-en
Malware Config
Extracted
urelas
112.175.88.207
112.175.88.208
Targets
-
-
Target
a8e80107d8d1e64b2e2a1aa7683f3e70_NeikiAnalytics
-
Size
80KB
-
MD5
a8e80107d8d1e64b2e2a1aa7683f3e70
-
SHA1
cf73995377c48a5e8a22a70d1ec04fa0e25e9891
-
SHA256
8a4909edd9fc35b36e7ae79908cb83dbd4d81629691f2a00667a81f03c8d54a4
-
SHA512
dc5069c8da735c2675fc83a725663ad8f7e9865e7703c6277de39a19888addecd0da02fc6670752d593ccc3cc2fa4b6e395abc6595bc0540b050a2ce8bf037d7
-
SSDEEP
1536:jIr3YriYiUi+H++o1eVlXd+8c0GXmvJJNHjLwl50fP5jy:jyYti0pXd+8c0GWvJ3Hvwl52W
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-