Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0a1e2a8e985c7b1f74845e4bb71ecfe0_NeikiAnalytics.exe

  • Size

    831KB

  • Sample

    240516-wtnsnshd55

  • MD5

    0a1e2a8e985c7b1f74845e4bb71ecfe0

  • SHA1

    1d6e833e9c345c12767481641066a7c08c3a6794

  • SHA256

    617e92659377c1b3ad840c40e63b6a9a4e3b4b4b3f59f8e4bacfaba3e56c957d

  • SHA512

    77049304f0b904cea8dd2dfde7c90a8e97fa1d7f7af665d934c6ef29b166f041eec4227e7c4f379b981bf66217c52100cf966144405755bde8bb26e33603b74a

  • SSDEEP

    6144:nwynAtMrOVRkidy9yIGWlUiwS4O8b8ITDnlznZ0NP4w:nwKfOVRo9yRYn4O8b8ITDnlC94w

Malware Config

Targets

    • Target

      0a1e2a8e985c7b1f74845e4bb71ecfe0_NeikiAnalytics.exe

    • Size

      831KB

    • MD5

      0a1e2a8e985c7b1f74845e4bb71ecfe0

    • SHA1

      1d6e833e9c345c12767481641066a7c08c3a6794

    • SHA256

      617e92659377c1b3ad840c40e63b6a9a4e3b4b4b3f59f8e4bacfaba3e56c957d

    • SHA512

      77049304f0b904cea8dd2dfde7c90a8e97fa1d7f7af665d934c6ef29b166f041eec4227e7c4f379b981bf66217c52100cf966144405755bde8bb26e33603b74a

    • SSDEEP

      6144:nwynAtMrOVRkidy9yIGWlUiwS4O8b8ITDnlznZ0NP4w:nwKfOVRo9yRYn4O8b8ITDnlC94w

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks