Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
aa712192192e64a87fa04f415fbb69f0_NeikiAnalytics
-
Size
9.3MB
-
Sample
240511-la19jsah4w
-
MD5
aa712192192e64a87fa04f415fbb69f0
-
SHA1
7027a7342257bd8dc4067eba4af5b54683f4ac9e
-
SHA256
ca48c231f150f0a2f73bac297945456efbccf7f7ac67a937b432ecb0f913dfc3
-
SHA512
2685fc8bcff2278f38e7e85c56ee028e59213e145b23e7df3980eb3fc42825c38ab22a320d6c16f07fed119ef68d6c01daa1a89ffd18a07551638b846a8072dd
-
SSDEEP
196608:naElX7PUzBriIJJtWhzbBo90pYi4d8GmhZM7N3aWtaAxIcSOGCM3tYoFzV:naQszBmqGhzlQHtCXaN3auCJOFMdX
Behavioral task
behavioral1
Sample
aa712192192e64a87fa04f415fbb69f0_NeikiAnalytics.exe
Resource
win7-20240419-en
Malware Config
Targets
-
-
Target
aa712192192e64a87fa04f415fbb69f0_NeikiAnalytics
-
Size
9.3MB
-
MD5
aa712192192e64a87fa04f415fbb69f0
-
SHA1
7027a7342257bd8dc4067eba4af5b54683f4ac9e
-
SHA256
ca48c231f150f0a2f73bac297945456efbccf7f7ac67a937b432ecb0f913dfc3
-
SHA512
2685fc8bcff2278f38e7e85c56ee028e59213e145b23e7df3980eb3fc42825c38ab22a320d6c16f07fed119ef68d6c01daa1a89ffd18a07551638b846a8072dd
-
SSDEEP
196608:naElX7PUzBriIJJtWhzbBo90pYi4d8GmhZM7N3aWtaAxIcSOGCM3tYoFzV:naQszBmqGhzlQHtCXaN3auCJOFMdX
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-