Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    44a951475bbf66cefc34b1fc3845b580_NeikiAnalytics.exe

  • Size

    843KB

  • Sample

    240528-p4w4gaeb7s

  • MD5

    44a951475bbf66cefc34b1fc3845b580

  • SHA1

    20dae9ecb9278ad5e7c518a276f8a594edc5a114

  • SHA256

    9221fcebfa4240f4267240bceb4744a30033ffd50875cf2af562f9da2f5240a1

  • SHA512

    c087b652a9b2283813313d27fdde4f26705764136b40b8c485fb95a806e1f5a47239ffc87651714f6287e5b93d06a3b752415c0984c1bf835087aeb3be6634ab

  • SSDEEP

    12288:TwKfOVRo9yRYK42X5sUSF14tr4O8b8ITDnlLvAYrIw6E:TxWVeyRYK4s2hzM4O8b8ITDnl7CE

Malware Config

Targets

    • Target

      44a951475bbf66cefc34b1fc3845b580_NeikiAnalytics.exe

    • Size

      843KB

    • MD5

      44a951475bbf66cefc34b1fc3845b580

    • SHA1

      20dae9ecb9278ad5e7c518a276f8a594edc5a114

    • SHA256

      9221fcebfa4240f4267240bceb4744a30033ffd50875cf2af562f9da2f5240a1

    • SHA512

      c087b652a9b2283813313d27fdde4f26705764136b40b8c485fb95a806e1f5a47239ffc87651714f6287e5b93d06a3b752415c0984c1bf835087aeb3be6634ab

    • SSDEEP

      12288:TwKfOVRo9yRYK42X5sUSF14tr4O8b8ITDnlLvAYrIw6E:TxWVeyRYK4s2hzM4O8b8ITDnl7CE

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks