Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
4845aa93c6412074c917053cda175170_NeikiAnalytics
-
Size
63KB
-
Sample
240512-x4tmcacd8s
-
MD5
4845aa93c6412074c917053cda175170
-
SHA1
6030c1ed31c08f2b25ba5f7f9d0e577216124467
-
SHA256
2018d6952c057a21cf55318d6aa22871daf2916c655848bffcabfc092e3e03e8
-
SHA512
dbde0759f5eb605c7169215a434ccea75b1dc07ad5e3f7beba9d3461fc7877c0b415f4d74fbe3958675f9254a27b3d8cefc1e043490d12ca7f58ab6e2d2bf772
-
SSDEEP
768:TOSEWgI6sRJ0QPk5Cd8NUIu0oWsV1qaZIp/Bj7YcRpaSOovHYxtxdvO:Sf9Uk5CdzGs1stvHYxtH2
Static task
static1
Behavioral task
behavioral1
Sample
4845aa93c6412074c917053cda175170_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4845aa93c6412074c917053cda175170_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
4845aa93c6412074c917053cda175170_NeikiAnalytics
-
Size
63KB
-
MD5
4845aa93c6412074c917053cda175170
-
SHA1
6030c1ed31c08f2b25ba5f7f9d0e577216124467
-
SHA256
2018d6952c057a21cf55318d6aa22871daf2916c655848bffcabfc092e3e03e8
-
SHA512
dbde0759f5eb605c7169215a434ccea75b1dc07ad5e3f7beba9d3461fc7877c0b415f4d74fbe3958675f9254a27b3d8cefc1e043490d12ca7f58ab6e2d2bf772
-
SSDEEP
768:TOSEWgI6sRJ0QPk5Cd8NUIu0oWsV1qaZIp/Bj7YcRpaSOovHYxtxdvO:Sf9Uk5CdzGs1stvHYxtH2
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-