Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
122s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
29/05/2024, 09:35
Static task
static1
Behavioral task
behavioral1
Sample
4f6330ec709473387a59980bb8c6cda0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
4f6330ec709473387a59980bb8c6cda0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
4f6330ec709473387a59980bb8c6cda0_NeikiAnalytics.exe
-
Size
1.0MB
-
MD5
4f6330ec709473387a59980bb8c6cda0
-
SHA1
e611fe48495d9a6861472cbc6f137f84baa67478
-
SHA256
ade91699dcf82de1dc3ae5ebcdfc240addfdeaa745e2a25f60fee577ce03f33b
-
SHA512
cdd2d791e69d5b6df15ab71c96a1ce84e298edc06625677ea3fdab94c08dcaafb254f588363bde5c24e9abbf1dfa601b21887403073dfc6936d6c8cabe612f0e
-
SSDEEP
12288:t37kxG9Wczc7V597bbAjiJqd8ZiDDQ/K4iOLvsjwPw0NCkIkbUct91:t3KccP7PAOJqKZiDU/K45jD4Ja9
Malware Config
Signatures
-
Drops file in Drivers directory 3 IoCs
description ioc Process File opened for modification C:\WINDOWS\system32\drivers\etc\hosts 4f6330ec709473387a59980bb8c6cda0_NeikiAnalytics.exe File created C:\WINDOWS\system32\drivers\etc\hosts.ics 4f6330ec709473387a59980bb8c6cda0_NeikiAnalytics.exe File opened for modification C:\WINDOWS\system32\drivers\etc\hosts.ics 4f6330ec709473387a59980bb8c6cda0_NeikiAnalytics.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2012 4f6330ec709473387a59980bb8c6cda0_NeikiAnalytics.exe 2012 4f6330ec709473387a59980bb8c6cda0_NeikiAnalytics.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2012 4f6330ec709473387a59980bb8c6cda0_NeikiAnalytics.exe 2012 4f6330ec709473387a59980bb8c6cda0_NeikiAnalytics.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
956B
MD5f7b4ae4e5a57fa0899c4119f543ac589
SHA1e18ba279f977726a5eea677d41eb75b0463e7cdb
SHA256ee18f272b4c969b3ea72df3e64e00c966d6fdc12db5ca5fc34409e271c959c76
SHA512fef22635d91ac8d132f9f3d10f667c2f1c8e4f8ef5f14b63721dd893bd661e2d327701b0cf79a5123bee2765ceffcd76feed5b0b6fe2f3f10af1eb866013fe44
-
Filesize
3KB
MD5ea430017190a44c201d3583f81629519
SHA1e31e1ff41417f7234f9c0e728d7f2945abb9b8b1
SHA256ea402d7ec27996b83d24850bab54abea499345f3f442c3243f94716fcc1b9e15
SHA51204bddd357de2d1590ca4acd754853fd26b1ff9255a3c2551f698873356e379a63545b1afbee459ebeee493f96d3e13d67e109953a38cf272a97687b85b4096c9