Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a789d85112422769a4e5bfd578aeb490_NeikiAnalytics.exe

  • Size

    82KB

  • Sample

    240520-el419aag66

  • MD5

    a789d85112422769a4e5bfd578aeb490

  • SHA1

    64df321279801aca306c432a8a38ebc553a78378

  • SHA256

    4e269c558ad900af1020823c7cb0b15d326898893b3f96d19dfe74ba205a028a

  • SHA512

    f70bd351fb551897fb67a84e5fb686e69e4f3dbbe61c74d7b48dfd656b69334b2140fe3a9ac9ab30aa668fd92398315266e4d530abbdbfcf8dba30b9bdcb5ae7

  • SSDEEP

    1536:azUQz74LIvK/+Czax4IHVdmRvW1BDVwrVXwP:qUQz74TmFnmRvW1gXwP

Score
7/10

Malware Config

Targets

    • Target

      a789d85112422769a4e5bfd578aeb490_NeikiAnalytics.exe

    • Size

      82KB

    • MD5

      a789d85112422769a4e5bfd578aeb490

    • SHA1

      64df321279801aca306c432a8a38ebc553a78378

    • SHA256

      4e269c558ad900af1020823c7cb0b15d326898893b3f96d19dfe74ba205a028a

    • SHA512

      f70bd351fb551897fb67a84e5fb686e69e4f3dbbe61c74d7b48dfd656b69334b2140fe3a9ac9ab30aa668fd92398315266e4d530abbdbfcf8dba30b9bdcb5ae7

    • SSDEEP

      1536:azUQz74LIvK/+Czax4IHVdmRvW1BDVwrVXwP:qUQz74TmFnmRvW1gXwP

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks