Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
147s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
15/05/2024, 14:48
General
-
Target
d71f0a6b008df11b48d134744d8ff9a0_NeikiAnalytics.exe
-
Size
775KB
-
MD5
d71f0a6b008df11b48d134744d8ff9a0
-
SHA1
b2629d74ff1479d9add9bdb4433d0683b5ce064d
-
SHA256
afef414d0c77ea240e7a3386bb18738b2ec0e227fb38f58b05831e20009cba89
-
SHA512
efddf411b280cede7668f5e0ba927f91daf5aefa9b70decd24852cd52dc2520e5c47181eb4f11126e6b8ab554acd0ea54486afc8feda90eb4125820a1cd332e4
-
SSDEEP
24576:OAnARmRsDwJxmj7TduSZpUR0GHrVQ1aW4mSOgv3isi:OXmRsDwHmj9pAHrVQ1/fSNvi
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d71f0a6b008df11b48d134744d8ff9a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d71f0a6b008df11b48d134744d8ff9a0_NeikiAnalytics.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
661KB
MD5ecb55ec9dcb233995fb9ef3a0e73224a
SHA1e69b824b74ea782cc0b3149e70b40f5b8aa2d532
SHA256f3e987265a4ea3e8c946b3e7e2fed190b9cb20bc10ff24c4e8c2eb7b1c72e200
SHA512997ad64598d49fd652228629bffe4fd7788d7f102c438b9fc949764ef87361afdf3e0aa4eef00d313be942a8e12b877883f7b2b455ee599b80040dbf9c708323
-
Filesize
680KB
-
Filesize
680KB
-
Filesize
800KB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
800KB