Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
36c6df3adcc499f5636450ee9f5ac8a0_NeikiAnalytics
-
Size
376KB
-
Sample
240515-z3tbasce93
-
MD5
36c6df3adcc499f5636450ee9f5ac8a0
-
SHA1
7518f981378c0aa4be6989e355a44726b3a04d23
-
SHA256
5f2f087aff6eaa0b98dfad731accaaa7ed9d303cd9e888af9e81f93557bf12a0
-
SHA512
a35c26ba50bae2341ffa93d10f623950671893c96a0530f74f0c16637043defa28f5e387267a4ac78e0db7987059d5c30f1bd726502870aa2e104af9f30283f7
-
SSDEEP
6144:HPhftdcNdPePhftdcNdP66dporo4rM6Ld9f71NYt5gfzDVlVXgOd:HPQdPePQdPdZILd9fQt5GpX
Behavioral task
behavioral1
Sample
36c6df3adcc499f5636450ee9f5ac8a0_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
36c6df3adcc499f5636450ee9f5ac8a0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
36c6df3adcc499f5636450ee9f5ac8a0_NeikiAnalytics
-
Size
376KB
-
MD5
36c6df3adcc499f5636450ee9f5ac8a0
-
SHA1
7518f981378c0aa4be6989e355a44726b3a04d23
-
SHA256
5f2f087aff6eaa0b98dfad731accaaa7ed9d303cd9e888af9e81f93557bf12a0
-
SHA512
a35c26ba50bae2341ffa93d10f623950671893c96a0530f74f0c16637043defa28f5e387267a4ac78e0db7987059d5c30f1bd726502870aa2e104af9f30283f7
-
SSDEEP
6144:HPhftdcNdPePhftdcNdP66dporo4rM6Ld9f71NYt5gfzDVlVXgOd:HPQdPePQdPdZILd9fQt5GpX
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-