Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    d942577c08f9fd0ca7364cfefc204490_NeikiAnalytics

  • Size

    23KB

  • Sample

    240515-tagtxagf2s

  • MD5

    d942577c08f9fd0ca7364cfefc204490

  • SHA1

    92a2cb5d4756d93ea9f810dda343444ad8bd5cff

  • SHA256

    724137a1b343aa6fd8c16a0fe556d573ee348c88330d2de4c6e607dc79fd3c02

  • SHA512

    dd0ccf8e34d957ff7e0ee0eec6a02373a5614a04d6e1fe85d3d581356f3bc84bd5d326490e7578582b9e5436b08d548663973acfd8302a7f5048041cbee6aeeb

  • SSDEEP

    384:jIz45tQC5AVSc+u3Y8CFUZdRM2EYXKFJ9z6usMA8uN+6FxP8cZU:jIU5tQSeYfFUZdyBYXKF7MQuQ6skU

Malware Config

Targets

    • Target

      d942577c08f9fd0ca7364cfefc204490_NeikiAnalytics

    • Size

      23KB

    • MD5

      d942577c08f9fd0ca7364cfefc204490

    • SHA1

      92a2cb5d4756d93ea9f810dda343444ad8bd5cff

    • SHA256

      724137a1b343aa6fd8c16a0fe556d573ee348c88330d2de4c6e607dc79fd3c02

    • SHA512

      dd0ccf8e34d957ff7e0ee0eec6a02373a5614a04d6e1fe85d3d581356f3bc84bd5d326490e7578582b9e5436b08d548663973acfd8302a7f5048041cbee6aeeb

    • SSDEEP

      384:jIz45tQC5AVSc+u3Y8CFUZdRM2EYXKFJ9z6usMA8uN+6FxP8cZU:jIU5tQSeYfFUZdyBYXKF7MQuQ6skU

    • Windows security bypass

    • Drops file in Drivers directory

    • Modifies Installed Components in the registry

    • Sets file execution options in registry

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Windows security modification

    • Modifies WinLogon

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks