Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    800eba920dfea659909f686be2f29460_NeikiAnalytics.exe

  • Size

    1.8MB

  • Sample

    240527-ntek1aaa3w

  • MD5

    800eba920dfea659909f686be2f29460

  • SHA1

    3e60b036ee7fdb29a0d297fb3e63de0d3fb321ee

  • SHA256

    f7c8e461bb87b62ea327f1997e1122f20daf20a79f09fb473b424a57bd47c571

  • SHA512

    157b7b73c17712fa53324f6f60664ec48cd71da91647fb100c455d06dd361aaa98b162ae18c3ad217f107cc141bef2bcf762208a3999e81e7e63d89cfe458f50

  • SSDEEP

    49152:bKJ0WR7AFPyyiSruXKpk3WFDL9zxnSrrfPOkhqvq:bKlBAFPydSS6W6X9ln0Okf

Score
7/10

Malware Config

Targets

    • Target

      800eba920dfea659909f686be2f29460_NeikiAnalytics.exe

    • Size

      1.8MB

    • MD5

      800eba920dfea659909f686be2f29460

    • SHA1

      3e60b036ee7fdb29a0d297fb3e63de0d3fb321ee

    • SHA256

      f7c8e461bb87b62ea327f1997e1122f20daf20a79f09fb473b424a57bd47c571

    • SHA512

      157b7b73c17712fa53324f6f60664ec48cd71da91647fb100c455d06dd361aaa98b162ae18c3ad217f107cc141bef2bcf762208a3999e81e7e63d89cfe458f50

    • SSDEEP

      49152:bKJ0WR7AFPyyiSruXKpk3WFDL9zxnSrrfPOkhqvq:bKlBAFPydSS6W6X9ln0Okf

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks