Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0c86dfa8feef7c24c5b5137eae705760_NeikiAnalytics.exe

  • Size

    62KB

  • Sample

    240531-x5akvsad3v

  • MD5

    0c86dfa8feef7c24c5b5137eae705760

  • SHA1

    4521e0c33a974b2a1e64f2ab6e7997046916c7eb

  • SHA256

    f049bc9b8865d0927215c0f6052f96263ff357ef8947bb92966dadb2cf58279a

  • SHA512

    0f90a04a8bb8d871ee6d46ee765d9acbed8fc031fa572d82d8c624870f3ca7298fa741c21f7374892b4e65d3e1bef59540e7c567b3b62116ebc9eb790e273ecd

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDII9ZvHKE4:ymb3NkkiQ3mdBjFII9ZvHKE4

Malware Config

Targets

    • Target

      0c86dfa8feef7c24c5b5137eae705760_NeikiAnalytics.exe

    • Size

      62KB

    • MD5

      0c86dfa8feef7c24c5b5137eae705760

    • SHA1

      4521e0c33a974b2a1e64f2ab6e7997046916c7eb

    • SHA256

      f049bc9b8865d0927215c0f6052f96263ff357ef8947bb92966dadb2cf58279a

    • SHA512

      0f90a04a8bb8d871ee6d46ee765d9acbed8fc031fa572d82d8c624870f3ca7298fa741c21f7374892b4e65d3e1bef59540e7c567b3b62116ebc9eb790e273ecd

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDII9ZvHKE4:ymb3NkkiQ3mdBjFII9ZvHKE4

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks