Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

d40e1914e7...cs.exe

windows7-x64

7

d40e1914e7...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d40e1914e75d6ce9103a03d6b266b7d0_NeikiAnalytics.exe

  • Size

    712KB

  • Sample

    240517-jn22wsge93

  • MD5

    d40e1914e75d6ce9103a03d6b266b7d0

  • SHA1

    321ec898a1ee43528784ed679c743bd8d6bc44e7

  • SHA256

    a45fc7ebee2b58c1f62f981755ba7a77047c6039fac1b8583923460dfe9a536a

  • SHA512

    b8c92e8e48fa654add5776ce59ac9d808bb9cb4126f6f62b6e6fc900ef1e5be071bb275858666dcb299ff048b26060efdd3ea9de582c4945226096b5202b1b41

  • SSDEEP

    12288:BtOw6Bax6FggLbrQXbR7jqkf1Hm7tJc0FS3jicGWVSI7dMua43Ek0cIHAN4:z6Ba6LaRFdGJm0Q3WKVSwdr13Ek0VA

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      d40e1914e75d6ce9103a03d6b266b7d0_NeikiAnalytics.exe

    • Size

      712KB

    • MD5

      d40e1914e75d6ce9103a03d6b266b7d0

    • SHA1

      321ec898a1ee43528784ed679c743bd8d6bc44e7

    • SHA256

      a45fc7ebee2b58c1f62f981755ba7a77047c6039fac1b8583923460dfe9a536a

    • SHA512

      b8c92e8e48fa654add5776ce59ac9d808bb9cb4126f6f62b6e6fc900ef1e5be071bb275858666dcb299ff048b26060efdd3ea9de582c4945226096b5202b1b41

    • SSDEEP

      12288:BtOw6Bax6FggLbrQXbR7jqkf1Hm7tJc0FS3jicGWVSI7dMua43Ek0cIHAN4:z6Ba6LaRFdGJm0Q3WKVSwdr13Ek0VA

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks