Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    5d5b6e4d3b0584e6111afa39db4ef9d0_NeikiAnalytics

  • Size

    3.7MB

  • Sample

    240512-z18yzabb24

  • MD5

    5d5b6e4d3b0584e6111afa39db4ef9d0

  • SHA1

    369afeecaac63ed872c8f59956c8b78aafd0fc2c

  • SHA256

    3a1a4ffb894e2673923bec9c1d735de2235b2783f96e1da7c1c02d024dc86a59

  • SHA512

    0e21e563362e19caa0f35e3985dc1f7cc547562063ec484794b268c7e54483a77622ff61082c75bb8daca577f3e4edd34319b723fb2ce8fa06004ab7ea66ed6e

  • SSDEEP

    98304:e3obcEffDvnh88mNuHMiABZlZlpGiuKvBGMQ9jfq:es7nhVPPiXHGbkAhlq

Malware Config

Targets

    • Target

      5d5b6e4d3b0584e6111afa39db4ef9d0_NeikiAnalytics

    • Size

      3.7MB

    • MD5

      5d5b6e4d3b0584e6111afa39db4ef9d0

    • SHA1

      369afeecaac63ed872c8f59956c8b78aafd0fc2c

    • SHA256

      3a1a4ffb894e2673923bec9c1d735de2235b2783f96e1da7c1c02d024dc86a59

    • SHA512

      0e21e563362e19caa0f35e3985dc1f7cc547562063ec484794b268c7e54483a77622ff61082c75bb8daca577f3e4edd34319b723fb2ce8fa06004ab7ea66ed6e

    • SSDEEP

      98304:e3obcEffDvnh88mNuHMiABZlZlpGiuKvBGMQ9jfq:es7nhVPPiXHGbkAhlq

    • Modifies AppInit DLL entries

    • Executes dropped EXE

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

MITRE ATT&CK Enterprise v15

Tasks