Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
dd710dd19162a4c1819766031b5f85d0_NeikiAnalytics
-
Size
120KB
-
Sample
240516-n2q9rsbb9w
-
MD5
dd710dd19162a4c1819766031b5f85d0
-
SHA1
4d9a03ec8600f10f2acc5aeda44e01eedaf1b01f
-
SHA256
2d7b1bea091e5bb74ef6bf132ffb0719aeb75e98cfbe88815c02018aed9d4e08
-
SHA512
9036334afbcee9b0afec52c7ef8eb5a92470bc0d4de2561795c97c517d6202e2c405ef9ef65be316770baee7c7ef12b47e71c55ce4743169c849b516fa6d529d
-
SSDEEP
3072:lnhJA3Qt/ojKb9QrCX6I6VCTuulAfDkvwjeG/Pt8:lnhZ/oucI6V/fgv0
Static task
static1
Behavioral task
behavioral1
Sample
dd710dd19162a4c1819766031b5f85d0_NeikiAnalytics.dll
Resource
win7-20240508-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
dd710dd19162a4c1819766031b5f85d0_NeikiAnalytics
-
Size
120KB
-
MD5
dd710dd19162a4c1819766031b5f85d0
-
SHA1
4d9a03ec8600f10f2acc5aeda44e01eedaf1b01f
-
SHA256
2d7b1bea091e5bb74ef6bf132ffb0719aeb75e98cfbe88815c02018aed9d4e08
-
SHA512
9036334afbcee9b0afec52c7ef8eb5a92470bc0d4de2561795c97c517d6202e2c405ef9ef65be316770baee7c7ef12b47e71c55ce4743169c849b516fa6d529d
-
SSDEEP
3072:lnhJA3Qt/ojKb9QrCX6I6VCTuulAfDkvwjeG/Pt8:lnhZ/oucI6V/fgv0
-
Modifies firewall policy service
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
1Windows Service
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
3Disable or Modify Tools
3Modify Registry
5