Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

9e0aa12eb1...cs.exe

windows7-x64

7

9e0aa12eb1...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9e0aa12eb15ee73fc31652d21e4310a0_NeikiAnalytics.exe

  • Size

    1.5MB

  • Sample

    240527-tw7mfsbb88

  • MD5

    9e0aa12eb15ee73fc31652d21e4310a0

  • SHA1

    982df094944a996f6ee2b347e4dd34502b227c8d

  • SHA256

    124e2f5a8055b6bbd8066b83b7270f3ef93efacea7a2d9130522a2164e942ed3

  • SHA512

    ef60737e3db096f7ca02f4aeedad1728d8c7464606e4473f7ac4551c29d7b2c91000e8a1343569cd1b4e00ca55a58a51272f5a8c5744a20edda7bc70a8ff74a1

  • SSDEEP

    12288:Up/SInr8vv2BDeT+bVYHTb3FRk/rMNxaXqqlPbJKTGv5DYFXOBnXREHa:K/i328ab4F+rM/aXq6bJfBUam6

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      9e0aa12eb15ee73fc31652d21e4310a0_NeikiAnalytics.exe

    • Size

      1.5MB

    • MD5

      9e0aa12eb15ee73fc31652d21e4310a0

    • SHA1

      982df094944a996f6ee2b347e4dd34502b227c8d

    • SHA256

      124e2f5a8055b6bbd8066b83b7270f3ef93efacea7a2d9130522a2164e942ed3

    • SHA512

      ef60737e3db096f7ca02f4aeedad1728d8c7464606e4473f7ac4551c29d7b2c91000e8a1343569cd1b4e00ca55a58a51272f5a8c5744a20edda7bc70a8ff74a1

    • SSDEEP

      12288:Up/SInr8vv2BDeT+bVYHTb3FRk/rMNxaXqqlPbJKTGv5DYFXOBnXREHa:K/i328ab4F+rM/aXq6bJfBUam6

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks