Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

194573521d...cs.exe

windows7-x64

10

194573521d...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    194573521d4ff5c862e2948cf8309f30_NeikiAnalytics.exe

  • Size

    53KB

  • Sample

    240516-xx3lnsbh98

  • MD5

    194573521d4ff5c862e2948cf8309f30

  • SHA1

    25ed2e52d574c80f013db1a81340a245ac5ceed0

  • SHA256

    a4a268dc72d8ac288d6c621fc2b5f5507b907925af103fdd76d5e180ff119de6

  • SHA512

    86179ebfce8bad584bc83734c5ea95417f6c031c773aeffa0d24f54158fedb3be141b5ba04cf2f737c66951f3dc5de6082726a97a1ee19c340be0c2919dfb241

  • SSDEEP

    1536:vNhg8r8QHkwp+2/7Kp3StjEMjmLM3ztDJWZsXy4JzxPME:fkwp/JJjmLM3zRJWZsXy4JN

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      194573521d4ff5c862e2948cf8309f30_NeikiAnalytics.exe

    • Size

      53KB

    • MD5

      194573521d4ff5c862e2948cf8309f30

    • SHA1

      25ed2e52d574c80f013db1a81340a245ac5ceed0

    • SHA256

      a4a268dc72d8ac288d6c621fc2b5f5507b907925af103fdd76d5e180ff119de6

    • SHA512

      86179ebfce8bad584bc83734c5ea95417f6c031c773aeffa0d24f54158fedb3be141b5ba04cf2f737c66951f3dc5de6082726a97a1ee19c340be0c2919dfb241

    • SSDEEP

      1536:vNhg8r8QHkwp+2/7Kp3StjEMjmLM3ztDJWZsXy4JzxPME:fkwp/JJjmLM3zRJWZsXy4JN

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks