Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    8f564889efe5d69367af0fd0b0a94380_NeikiAnalytics.exe

  • Size

    456KB

  • Sample

    240523-1gsnbahf68

  • MD5

    8f564889efe5d69367af0fd0b0a94380

  • SHA1

    786a83d3c81657341e70b21b24ad37d9c95d9e27

  • SHA256

    d741397ad7246413364e25066b4ee73d76ff27c0e3a6de2290f2f51a4a51e764

  • SHA512

    24b37cfd608c910a0c2d5be91e5d4cb0e69be5a76546edeed1add3be08e201543bf71f0812a53a1228c5359883d590c7e5199eb31111ee10ca64128f004e1c40

  • SSDEEP

    12288:04wFHoSyd0V3eFp3IDvSbh5nPYERM8mXzplo4MV:rd0gFp3lz1/uzplo9

Malware Config

Targets

    • Target

      8f564889efe5d69367af0fd0b0a94380_NeikiAnalytics.exe

    • Size

      456KB

    • MD5

      8f564889efe5d69367af0fd0b0a94380

    • SHA1

      786a83d3c81657341e70b21b24ad37d9c95d9e27

    • SHA256

      d741397ad7246413364e25066b4ee73d76ff27c0e3a6de2290f2f51a4a51e764

    • SHA512

      24b37cfd608c910a0c2d5be91e5d4cb0e69be5a76546edeed1add3be08e201543bf71f0812a53a1228c5359883d590c7e5199eb31111ee10ca64128f004e1c40

    • SSDEEP

      12288:04wFHoSyd0V3eFp3IDvSbh5nPYERM8mXzplo4MV:rd0gFp3lz1/uzplo9

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks