Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

4603037222...cs.exe

windows7-x64

6

4603037222...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4603037222e759fad531bc533fa715a0_NeikiAnalytics.exe

  • Size

    169KB

  • Sample

    240526-y3g3labf85

  • MD5

    4603037222e759fad531bc533fa715a0

  • SHA1

    5ed0b37845d7b077262495d0b7d537f4e078fbcf

  • SHA256

    efbb1646395087d8b9f5ae733d46b28dd3d52d924c83e43bad1a0687af8ee498

  • SHA512

    cbf3a465bdc9ff37f382f92536b13f2b730fe6d6c8b0aab58d532c0ddf3d8a65b001ec3ad590472df427e30ee8c44fcb57948d9b9fa440c888da768fd892a658

  • SSDEEP

    3072:J14mOxrKFNZYhrgtRFuV2DDbuiTf3hPsOraS87FYqjTZbn4TGh:JnYWYhrgtRo6DSiTf3hPswa1TZjxh

Score
7/10
persistence

Malware Config

Targets

    • Target

      4603037222e759fad531bc533fa715a0_NeikiAnalytics.exe

    • Size

      169KB

    • MD5

      4603037222e759fad531bc533fa715a0

    • SHA1

      5ed0b37845d7b077262495d0b7d537f4e078fbcf

    • SHA256

      efbb1646395087d8b9f5ae733d46b28dd3d52d924c83e43bad1a0687af8ee498

    • SHA512

      cbf3a465bdc9ff37f382f92536b13f2b730fe6d6c8b0aab58d532c0ddf3d8a65b001ec3ad590472df427e30ee8c44fcb57948d9b9fa440c888da768fd892a658

    • SSDEEP

      3072:J14mOxrKFNZYhrgtRFuV2DDbuiTf3hPsOraS87FYqjTZbn4TGh:JnYWYhrgtRo6DSiTf3hPswa1TZjxh

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence

    • Checks for any installed AV software in registry

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks