Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

7707652499...cs.exe

windows7-x64

8

7707652499...cs.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    77076524991a132b4d23bb7e83a9edb0_NeikiAnalytics.exe

  • Size

    629KB

  • Sample

    240526-gny9wshb8s

  • MD5

    77076524991a132b4d23bb7e83a9edb0

  • SHA1

    f8439a70ac3b851a5e67da4b91ca28ec5abc879c

  • SHA256

    8999ee0edae430356495baac9163eca6583f679a709179c45688a8e69d319324

  • SHA512

    a97809ef692471182abb85963b7822750015f024603520bc36fc1bb4fa7fa3a9eceb5253859594184b51817e93df91654aac55a912de56a7bd08fb7b0c79542a

  • SSDEEP

    6144:j4sZBOZdjEYTPXMhaMP/kFTA7OA/BOZdjEYF:jnANL8oq/kFTsOxNF

Score
8/10
persistence

Malware Config

Targets

    • Target

      77076524991a132b4d23bb7e83a9edb0_NeikiAnalytics.exe

    • Size

      629KB

    • MD5

      77076524991a132b4d23bb7e83a9edb0

    • SHA1

      f8439a70ac3b851a5e67da4b91ca28ec5abc879c

    • SHA256

      8999ee0edae430356495baac9163eca6583f679a709179c45688a8e69d319324

    • SHA512

      a97809ef692471182abb85963b7822750015f024603520bc36fc1bb4fa7fa3a9eceb5253859594184b51817e93df91654aac55a912de56a7bd08fb7b0c79542a

    • SSDEEP

      6144:j4sZBOZdjEYTPXMhaMP/kFTA7OA/BOZdjEYF:jnANL8oq/kFTsOxNF

    Score
    8/10
    persistence

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks