Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

82ab49c0b0...cs.exe

windows7-x64

7

82ab49c0b0...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    82ab49c0b09b3a5e345d583b4c946a90_NeikiAnalytics.exe

  • Size

    94KB

  • Sample

    240531-2kq5bsga7t

  • MD5

    82ab49c0b09b3a5e345d583b4c946a90

  • SHA1

    7429b51b9934c1d61f01000fd40a45b63eb7ec61

  • SHA256

    ea0abd691e5ebb4878cad5500a95ffe8f546fbd366106f1a5bfe37213db672d9

  • SHA512

    24defe8ae649bbaf5c8d52aa3ae0e2108ebd92143eb21015d0dfd84aa41469add6938fc8d2eb423a5a5e5e984072bc203126831e2678516b880e814fe65a0f5b

  • SSDEEP

    1536:PGYU/W2/HG6QMauSV3ixJHABLrmhH7i9CO+WHg7zRZICrWaGZh7uC:PfU/WF6QMauSuiWNi9CO+WARJrWNZ5

Score
7/10
persistence

Malware Config

Targets

    • Target

      82ab49c0b09b3a5e345d583b4c946a90_NeikiAnalytics.exe

    • Size

      94KB

    • MD5

      82ab49c0b09b3a5e345d583b4c946a90

    • SHA1

      7429b51b9934c1d61f01000fd40a45b63eb7ec61

    • SHA256

      ea0abd691e5ebb4878cad5500a95ffe8f546fbd366106f1a5bfe37213db672d9

    • SHA512

      24defe8ae649bbaf5c8d52aa3ae0e2108ebd92143eb21015d0dfd84aa41469add6938fc8d2eb423a5a5e5e984072bc203126831e2678516b880e814fe65a0f5b

    • SSDEEP

      1536:PGYU/W2/HG6QMauSV3ixJHABLrmhH7i9CO+WHg7zRZICrWaGZh7uC:PfU/WF6QMauSuiWNi9CO+WARJrWNZ5

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks