Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

4f9ab3609a...cs.exe

windows7-x64

7

4f9ab3609a...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4f9ab3609afeb52e8bcae2bc075f3ba0_NeikiAnalytics.exe

  • Size

    12KB

  • Sample

    240516-2wpqmscg6v

  • MD5

    4f9ab3609afeb52e8bcae2bc075f3ba0

  • SHA1

    aa570248055a1d813d6f120c3fea1e850413c4b3

  • SHA256

    7f4e9f4e7aefcf89eddbbef85ab7f5a4c46282b4948beb5bc7f0049487cc216c

  • SHA512

    f11e1d74f536312e4a9ed74caf311f4666609871a0e2c6c7f296fa9c7b9b5ee20888bbc09fd8eeb09b9b38ed4b0f29d4865531619842f2b9331ba437973c3f66

  • SSDEEP

    384:aL7li/2zKq2DcEQvdhcJKLTp/NK9xa3v:EaM/Q9c3v

Score
7/10

Malware Config

Targets

    • Target

      4f9ab3609afeb52e8bcae2bc075f3ba0_NeikiAnalytics.exe

    • Size

      12KB

    • MD5

      4f9ab3609afeb52e8bcae2bc075f3ba0

    • SHA1

      aa570248055a1d813d6f120c3fea1e850413c4b3

    • SHA256

      7f4e9f4e7aefcf89eddbbef85ab7f5a4c46282b4948beb5bc7f0049487cc216c

    • SHA512

      f11e1d74f536312e4a9ed74caf311f4666609871a0e2c6c7f296fa9c7b9b5ee20888bbc09fd8eeb09b9b38ed4b0f29d4865531619842f2b9331ba437973c3f66

    • SSDEEP

      384:aL7li/2zKq2DcEQvdhcJKLTp/NK9xa3v:EaM/Q9c3v

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks