Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b4e7ed81054fc59cb683727ddf5c7700_NeikiAnalytics.exe

  • Size

    786KB

  • Sample

    240520-fsjjkada54

  • MD5

    b4e7ed81054fc59cb683727ddf5c7700

  • SHA1

    fc1c4f6bba631951ea0f7e4c58fbdf352d749f19

  • SHA256

    7bf4ea67a4744def1c430e7fef939a1bd548da3f5b89de05b4721dc7ec3cacf7

  • SHA512

    220daf7668209d5ba3121986d1ef85f318bf51b5a59802b9531f94ca30e3fae068a5242d0eab411209e174a3132c82a15c68278762957fdb3c6b42f2b58c8e3e

  • SSDEEP

    12288:uwKfOVRo9yRYiQ7E4O8b8ITDnlOB1ZhIRPA0:uxWVeyRYiQ7E4O8b8ITDnlO30

Malware Config

Targets

    • Target

      b4e7ed81054fc59cb683727ddf5c7700_NeikiAnalytics.exe

    • Size

      786KB

    • MD5

      b4e7ed81054fc59cb683727ddf5c7700

    • SHA1

      fc1c4f6bba631951ea0f7e4c58fbdf352d749f19

    • SHA256

      7bf4ea67a4744def1c430e7fef939a1bd548da3f5b89de05b4721dc7ec3cacf7

    • SHA512

      220daf7668209d5ba3121986d1ef85f318bf51b5a59802b9531f94ca30e3fae068a5242d0eab411209e174a3132c82a15c68278762957fdb3c6b42f2b58c8e3e

    • SSDEEP

      12288:uwKfOVRo9yRYiQ7E4O8b8ITDnlOB1ZhIRPA0:uxWVeyRYiQ7E4O8b8ITDnlO30

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks