Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0a0eb6c4a57265f313d0c28e1dded3f0_NeikiAnalytics

  • Size

    285KB

  • Sample

    240510-z95mxaae4y

  • MD5

    0a0eb6c4a57265f313d0c28e1dded3f0

  • SHA1

    b9516c7a631d79fa8e0729cc5fe4177f43086169

  • SHA256

    09f865269ddb3e1e27c5f16a8297a0955e5dbf2f5214e42216252166c98d7f35

  • SHA512

    ed010947695256d63fdf85b678a1008ae972e06870c305fe0fb7f76fecca3edf0317e0d245172c562628715622743d30b3f55a7bd6e26e64caf6ad86f1542823

  • SSDEEP

    6144:+ZyKE4FBg+XHnZYkQGmzRrOEg0q/vjLm1AHkUm1Ys8xiV4DvtsJRlVDqa8GzNHLm:NBaBnmtOwq/+1MkU68raJRHua8G9Lcoc

Score
10/10

Malware Config

Targets

    • Target

      0a0eb6c4a57265f313d0c28e1dded3f0_NeikiAnalytics

    • Size

      285KB

    • MD5

      0a0eb6c4a57265f313d0c28e1dded3f0

    • SHA1

      b9516c7a631d79fa8e0729cc5fe4177f43086169

    • SHA256

      09f865269ddb3e1e27c5f16a8297a0955e5dbf2f5214e42216252166c98d7f35

    • SHA512

      ed010947695256d63fdf85b678a1008ae972e06870c305fe0fb7f76fecca3edf0317e0d245172c562628715622743d30b3f55a7bd6e26e64caf6ad86f1542823

    • SSDEEP

      6144:+ZyKE4FBg+XHnZYkQGmzRrOEg0q/vjLm1AHkUm1Ys8xiV4DvtsJRlVDqa8GzNHLm:NBaBnmtOwq/+1MkU68raJRHua8G9Lcoc

    Score
    10/10
    • Modifies firewall policy service

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.