Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    41362fc117d8de01f56a86d060ac6bf0_NeikiAnalytics

  • Size

    578KB

  • Sample

    240514-3albrsea28

  • MD5

    41362fc117d8de01f56a86d060ac6bf0

  • SHA1

    5d0c0a74b613b60b409c5c3a89f3bcd3e01a0f91

  • SHA256

    49cb55b8a6bd8d4b214d45ea3923086c791450edfc78152835331120b89b5cd6

  • SHA512

    0b294cb0e7d0152164514bae98b73fc1788c41ac4e3a827e28c3599314b0d1ed564503f01c3994f1233fa805ec35667205542b053b910bdf6bb2176b9b6fdb5d

  • SSDEEP

    12288:0EQoSCGZ47EyEnLDntYP1NANwkOqrceXzY6E0riRs1STYeQZfO:0+7Eyupo1WCqrceXzYW2Vw2

Malware Config

Targets

    • Target

      41362fc117d8de01f56a86d060ac6bf0_NeikiAnalytics

    • Size

      578KB

    • MD5

      41362fc117d8de01f56a86d060ac6bf0

    • SHA1

      5d0c0a74b613b60b409c5c3a89f3bcd3e01a0f91

    • SHA256

      49cb55b8a6bd8d4b214d45ea3923086c791450edfc78152835331120b89b5cd6

    • SHA512

      0b294cb0e7d0152164514bae98b73fc1788c41ac4e3a827e28c3599314b0d1ed564503f01c3994f1233fa805ec35667205542b053b910bdf6bb2176b9b6fdb5d

    • SSDEEP

      12288:0EQoSCGZ47EyEnLDntYP1NANwkOqrceXzY6E0riRs1STYeQZfO:0+7Eyupo1WCqrceXzYW2Vw2

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks