7f7069b5fc08a1b06e04fb4e4f22426fbb190c952358ca5a620f32a0834a1676 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

7

e1b02614f7...cs.exe

windows7-x64

8

e1b02614f7...cs.exe

windows10-2004-x64

8

Sharing

General

Target

e1b02614f7b092ff91335498b9ee3f30_NeikiAnalytics
Size

54KB
Sample

240516-rmfq9sgh64
MD5

e1b02614f7b092ff91335498b9ee3f30
SHA1

6b461fd3f403f45a8b9964bbc9b3160097a421d6
SHA256

7f7069b5fc08a1b06e04fb4e4f22426fbb190c952358ca5a620f32a0834a1676
SHA512

f9d867298b5100f309f588c24d347bec23631056838a386355ad5fb5cd5ea741e67c16b03fed862e078d366f149b7e454527f7186ac04880115307cb7c56f26b
SSDEEP

384:+SDuuOFZyUVpULCgDb2prxVTw24iJ6Al6z+yX0f0BT2EpmuKowBpyUUep4+2yiif:3DcZyUpULCgod/J96ayXv/pWnnA8

Score

8^/10

evasion upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

e1b02614f7b092ff91335498b9ee3f30_NeikiAnalytics.exe

Resource

win7-20240221-en

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

e1b02614f7b092ff91335498b9ee3f30_NeikiAnalytics.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  e1b02614f7b092ff91335498b9ee3f30_NeikiAnalytics
- Size
  
  54KB
- MD5
  
  e1b02614f7b092ff91335498b9ee3f30
- SHA1
  
  6b461fd3f403f45a8b9964bbc9b3160097a421d6
- SHA256
  
  7f7069b5fc08a1b06e04fb4e4f22426fbb190c952358ca5a620f32a0834a1676
- SHA512
  
  f9d867298b5100f309f588c24d347bec23631056838a386355ad5fb5cd5ea741e67c16b03fed862e078d366f149b7e454527f7186ac04880115307cb7c56f26b
- SSDEEP
  
  384:+SDuuOFZyUVpULCgDb2prxVTw24iJ6Al6z+yX0f0BT2EpmuKowBpyUUep4+2yiif:3DcZyUpULCgod/J96ayXv/pWnnA8
Score

8^/10

evasion upx
- Sets file to hidden
  Modifies file attributes to stop it showing in Explorer etc.
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.