Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    482ff905f158982b6ac97ec78423bd60_NeikiAnalytics.exe

  • Size

    45KB

  • Sample

    240519-14by3sch5x

  • MD5

    482ff905f158982b6ac97ec78423bd60

  • SHA1

    8ddf926035db93ae5217d4dd6baf2756fb9b471e

  • SHA256

    d44289e14cc4a6807c36d5f39a3b74a8bdcfa6bd687ec12254f04b276bcfce4b

  • SHA512

    68ce31fa62e31e7a5cf072a38c8cfc213750ad916bc823b6eb883421f5e3db700cfa9db2037c16b7d97ca046c64a1699d40d1c8172d9360f62c386341b715e77

  • SSDEEP

    768:xmFQj8rM9whcqet8Wfxd9Mmnfa+TAOBJgZiPGyilSniJO14ktp7DFK+5nES:zAwEmBZ04faWmtN4nic+6GS

Score
10/10

Malware Config

Targets

    • Target

      482ff905f158982b6ac97ec78423bd60_NeikiAnalytics.exe

    • Size

      45KB

    • MD5

      482ff905f158982b6ac97ec78423bd60

    • SHA1

      8ddf926035db93ae5217d4dd6baf2756fb9b471e

    • SHA256

      d44289e14cc4a6807c36d5f39a3b74a8bdcfa6bd687ec12254f04b276bcfce4b

    • SHA512

      68ce31fa62e31e7a5cf072a38c8cfc213750ad916bc823b6eb883421f5e3db700cfa9db2037c16b7d97ca046c64a1699d40d1c8172d9360f62c386341b715e77

    • SSDEEP

      768:xmFQj8rM9whcqet8Wfxd9Mmnfa+TAOBJgZiPGyilSniJO14ktp7DFK+5nES:zAwEmBZ04faWmtN4nic+6GS

    Score
    10/10
    • Modifies WinLogon for persistence

    • Modifies visibility of file extensions in Explorer

    • Modifies visiblity of hidden/system files in Explorer

    • Disables RegEdit via registry modification

    • Disables use of System Restore points

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks