Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
a036b44bd7663a0bf4b8cf9c4e86fef0_NeikiAnalytics
-
Size
12KB
-
Sample
240516-fqladadd73
-
MD5
a036b44bd7663a0bf4b8cf9c4e86fef0
-
SHA1
aa3e57265d54e04136e2035df4a18b9670b30340
-
SHA256
a6dab7902ff7cb81dd907b2a21a0a6c518c2471db75ef04f6568c0a095f7e060
-
SHA512
78067682d69519465717b468e7d6ac95184fde6435adaddd8dd931a2881435234ee37f5ef59dcd120a1c6de9f8115d10b37423f164f0510b885b4c590041f1ac
-
SSDEEP
384:lL7li/2zhq2DcEQvdhcJKLTp/NK9xaDj:lxM/Q9cDj
Static task
static1
Behavioral task
behavioral1
Sample
a036b44bd7663a0bf4b8cf9c4e86fef0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a036b44bd7663a0bf4b8cf9c4e86fef0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
a036b44bd7663a0bf4b8cf9c4e86fef0_NeikiAnalytics
-
Size
12KB
-
MD5
a036b44bd7663a0bf4b8cf9c4e86fef0
-
SHA1
aa3e57265d54e04136e2035df4a18b9670b30340
-
SHA256
a6dab7902ff7cb81dd907b2a21a0a6c518c2471db75ef04f6568c0a095f7e060
-
SHA512
78067682d69519465717b468e7d6ac95184fde6435adaddd8dd931a2881435234ee37f5ef59dcd120a1c6de9f8115d10b37423f164f0510b885b4c590041f1ac
-
SSDEEP
384:lL7li/2zhq2DcEQvdhcJKLTp/NK9xaDj:lxM/Q9cDj
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Uses the VBS compiler for execution
-