Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
301b92f66a94e8bf3b7f6c93dc761f30_NeikiAnalytics
-
Size
224KB
-
Sample
240511-ychansgh34
-
MD5
301b92f66a94e8bf3b7f6c93dc761f30
-
SHA1
8cf96e36787dd889b2e76e9f2ca4c559496346b9
-
SHA256
f1d032fb99da003501008c140a2e991145472214f3b992f9e7dc88e0d9e667b7
-
SHA512
07023d0091a11c3cbff57ff68a8203fed0bfa81132d55ff748aa6f1bbd455ae101462282c40aac14996febe840552b0782ad05b9f3518729c6c61dad0b4bf815
-
SSDEEP
6144:0Is9OKofHfHTXQLzgvnzHPowYbvrjD/L7QPbg/Dr0T3rnXLHf7zjPFsEPAsKCtZy:VKofHfHTXQLzgvnzHPowYbvrjD/L7QPo
Static task
static1
Behavioral task
behavioral1
Sample
301b92f66a94e8bf3b7f6c93dc761f30_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
301b92f66a94e8bf3b7f6c93dc761f30_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
301b92f66a94e8bf3b7f6c93dc761f30_NeikiAnalytics
-
Size
224KB
-
MD5
301b92f66a94e8bf3b7f6c93dc761f30
-
SHA1
8cf96e36787dd889b2e76e9f2ca4c559496346b9
-
SHA256
f1d032fb99da003501008c140a2e991145472214f3b992f9e7dc88e0d9e667b7
-
SHA512
07023d0091a11c3cbff57ff68a8203fed0bfa81132d55ff748aa6f1bbd455ae101462282c40aac14996febe840552b0782ad05b9f3518729c6c61dad0b4bf815
-
SSDEEP
6144:0Is9OKofHfHTXQLzgvnzHPowYbvrjD/L7QPbg/Dr0T3rnXLHf7zjPFsEPAsKCtZy:VKofHfHTXQLzgvnzHPowYbvrjD/L7QPo
Score8/10-
Drops file in Drivers directory
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Drops file in System32 directory
-