Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2078789126d0f957c30220478428b920_NeikiAnalytics.exe

  • Size

    12KB

  • Sample

    240529-azdzrsca56

  • MD5

    2078789126d0f957c30220478428b920

  • SHA1

    235b26d7a2ea1a4c05dbfda6fa6711826f16a8f9

  • SHA256

    37d1c491f7218be7b012f3887996c404ebe72a2fce5a2b2b682d12e5d2a6678e

  • SHA512

    6e7378db6950fc2367ae60bd7aa673c832e06fd7ef158b2232554dcf9bd58fb4f559e0481d1e61486fff09ccbbb8c003d6d77c20f3090afd9ce334cb5aff2cc3

  • SSDEEP

    384:IL7li/2zsq2DcEQvdQcJKLTp/NK9xaH5:2gMCQ9cH5

Score
7/10

Malware Config

Targets

    • Target

      2078789126d0f957c30220478428b920_NeikiAnalytics.exe

    • Size

      12KB

    • MD5

      2078789126d0f957c30220478428b920

    • SHA1

      235b26d7a2ea1a4c05dbfda6fa6711826f16a8f9

    • SHA256

      37d1c491f7218be7b012f3887996c404ebe72a2fce5a2b2b682d12e5d2a6678e

    • SHA512

      6e7378db6950fc2367ae60bd7aa673c832e06fd7ef158b2232554dcf9bd58fb4f559e0481d1e61486fff09ccbbb8c003d6d77c20f3090afd9ce334cb5aff2cc3

    • SSDEEP

      384:IL7li/2zsq2DcEQvdQcJKLTp/NK9xaH5:2gMCQ9cH5

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

MITRE ATT&CK Enterprise v15

Tasks