Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
d79e1f0b97b27bbf1b4f6d230b49a5a0_NeikiAnalytics
-
Size
124KB
-
Sample
240516-lqfmsafa85
-
MD5
d79e1f0b97b27bbf1b4f6d230b49a5a0
-
SHA1
21f08e1381b830f64befeea21e3a5a69805979ce
-
SHA256
275d97b29481a11559a0e0b1fbfe3baad2a3b4902b38c09a602040ea2993ad2b
-
SHA512
885dc57cbc2b1c7662b78488fda4e64e58354a49aaf0a8603308e9e8beee3ae642620c7fb7205cc769403a527df4705d23c5dfd26fd0e409495df0260cfe9408
-
SSDEEP
1536:Ajszc5YOIhRO/N69BH3OoGa+FL9jKceRgrkjSo3E:cGOY1hkFoN3Oo1+F92SP
Static task
static1
Behavioral task
behavioral1
Sample
d79e1f0b97b27bbf1b4f6d230b49a5a0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d79e1f0b97b27bbf1b4f6d230b49a5a0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
d79e1f0b97b27bbf1b4f6d230b49a5a0_NeikiAnalytics
-
Size
124KB
-
MD5
d79e1f0b97b27bbf1b4f6d230b49a5a0
-
SHA1
21f08e1381b830f64befeea21e3a5a69805979ce
-
SHA256
275d97b29481a11559a0e0b1fbfe3baad2a3b4902b38c09a602040ea2993ad2b
-
SHA512
885dc57cbc2b1c7662b78488fda4e64e58354a49aaf0a8603308e9e8beee3ae642620c7fb7205cc769403a527df4705d23c5dfd26fd0e409495df0260cfe9408
-
SSDEEP
1536:Ajszc5YOIhRO/N69BH3OoGa+FL9jKceRgrkjSo3E:cGOY1hkFoN3Oo1+F92SP
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-