Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    c48f64491a7a7b87bf124877a63ed240_NeikiAnalytics

  • Size

    2.6MB

  • Sample

    240516-j1glqabd5s

  • MD5

    c48f64491a7a7b87bf124877a63ed240

  • SHA1

    85aed40db6aaaf296c2be48290ccf135276a3ac5

  • SHA256

    10f1c6d91af5d7115b3a4778c641a4473fde255b6d0517b30d09f6d82cfb2eae

  • SHA512

    eb7f5c4e3f1124dbdade029e9d70f9a100c1d00a7fa29427377df41a574a7ea01dd28a5215e122741062aea60b22edcb80e4312c018a252f39826e2c8616a089

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBcB/bS:sxX7QnxrloE5dpUpDb

Malware Config

Targets

    • Target

      c48f64491a7a7b87bf124877a63ed240_NeikiAnalytics

    • Size

      2.6MB

    • MD5

      c48f64491a7a7b87bf124877a63ed240

    • SHA1

      85aed40db6aaaf296c2be48290ccf135276a3ac5

    • SHA256

      10f1c6d91af5d7115b3a4778c641a4473fde255b6d0517b30d09f6d82cfb2eae

    • SHA512

      eb7f5c4e3f1124dbdade029e9d70f9a100c1d00a7fa29427377df41a574a7ea01dd28a5215e122741062aea60b22edcb80e4312c018a252f39826e2c8616a089

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBcB/bS:sxX7QnxrloE5dpUpDb

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks