Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    08e5213d2dc7a975954b41606a430a10_NeikiAnalytics

  • Size

    1.6MB

  • Sample

    240510-z7nxdaac8s

  • MD5

    08e5213d2dc7a975954b41606a430a10

  • SHA1

    6d371cf864dc55837eb135daf566c82483a99ee2

  • SHA256

    77c700bc548a98308e6ad79b95003327c72f40134b32eb7c1baba2178eff8da4

  • SHA512

    75e484d15d07b1bd21a41215de330c0fe6cd84874fdb698760d0a99d97296092883b20f4615788fcc85411c7dd3c3eea53e4faf13733a9e4774bb002941a9fc4

  • SSDEEP

    49152:s4H/Mi8QAESDFuyUoz2zb0ypHgjM/kKHIp:s2/MijIFuIzwbxpHiMsKHIp

Malware Config

Targets

    • Target

      08e5213d2dc7a975954b41606a430a10_NeikiAnalytics

    • Size

      1.6MB

    • MD5

      08e5213d2dc7a975954b41606a430a10

    • SHA1

      6d371cf864dc55837eb135daf566c82483a99ee2

    • SHA256

      77c700bc548a98308e6ad79b95003327c72f40134b32eb7c1baba2178eff8da4

    • SHA512

      75e484d15d07b1bd21a41215de330c0fe6cd84874fdb698760d0a99d97296092883b20f4615788fcc85411c7dd3c3eea53e4faf13733a9e4774bb002941a9fc4

    • SSDEEP

      49152:s4H/Mi8QAESDFuyUoz2zb0ypHgjM/kKHIp:s2/MijIFuIzwbxpHiMsKHIp

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks