Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    194573521d4ff5c862e2948cf8309f30_NeikiAnalytics.exe

  • Size

    53KB

  • Sample

    240516-xx3lnsbh98

  • MD5

    194573521d4ff5c862e2948cf8309f30

  • SHA1

    25ed2e52d574c80f013db1a81340a245ac5ceed0

  • SHA256

    a4a268dc72d8ac288d6c621fc2b5f5507b907925af103fdd76d5e180ff119de6

  • SHA512

    86179ebfce8bad584bc83734c5ea95417f6c031c773aeffa0d24f54158fedb3be141b5ba04cf2f737c66951f3dc5de6082726a97a1ee19c340be0c2919dfb241

  • SSDEEP

    1536:vNhg8r8QHkwp+2/7Kp3StjEMjmLM3ztDJWZsXy4JzxPME:fkwp/JJjmLM3zRJWZsXy4JN

Score
10/10

Malware Config

Targets

    • Target

      194573521d4ff5c862e2948cf8309f30_NeikiAnalytics.exe

    • Size

      53KB

    • MD5

      194573521d4ff5c862e2948cf8309f30

    • SHA1

      25ed2e52d574c80f013db1a81340a245ac5ceed0

    • SHA256

      a4a268dc72d8ac288d6c621fc2b5f5507b907925af103fdd76d5e180ff119de6

    • SHA512

      86179ebfce8bad584bc83734c5ea95417f6c031c773aeffa0d24f54158fedb3be141b5ba04cf2f737c66951f3dc5de6082726a97a1ee19c340be0c2919dfb241

    • SSDEEP

      1536:vNhg8r8QHkwp+2/7Kp3StjEMjmLM3ztDJWZsXy4JzxPME:fkwp/JJjmLM3zRJWZsXy4JN

    Score
    10/10
    • Modifies visiblity of hidden/system files in Explorer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks