Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

8618f066f0...cs.exe

windows7-x64

8

8618f066f0...cs.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8618f066f07a19c07dfed8be46183dd0_NeikiAnalytics.exe

  • Size

    65KB

  • Sample

    240601-aqly1sba2v

  • MD5

    8618f066f07a19c07dfed8be46183dd0

  • SHA1

    979ca3d04943a768a182e929a20f6ade605f97f9

  • SHA256

    23efc0890f2d3e0e42e904aad48cdf957b4c2e5232e5a12cf70ce560ebfdcbc0

  • SHA512

    dfd8379422e11680cced696cc4eb7176cbee8fcbca7e0e82a1cce99eb8b4f6b074b3a100588890a43f3e344361ebf6f40cf7d5392b1e71a364a867284b986d19

  • SSDEEP

    768:ZrItKyw5WHXfQIhIiIk9ecAaVPD96KyX6HLLLL9:Zr3Z5IfQIR81ad5yX6HLLLL9

Score
8/10
evasion

Malware Config

Targets

    • Target

      8618f066f07a19c07dfed8be46183dd0_NeikiAnalytics.exe

    • Size

      65KB

    • MD5

      8618f066f07a19c07dfed8be46183dd0

    • SHA1

      979ca3d04943a768a182e929a20f6ade605f97f9

    • SHA256

      23efc0890f2d3e0e42e904aad48cdf957b4c2e5232e5a12cf70ce560ebfdcbc0

    • SHA512

      dfd8379422e11680cced696cc4eb7176cbee8fcbca7e0e82a1cce99eb8b4f6b074b3a100588890a43f3e344361ebf6f40cf7d5392b1e71a364a867284b986d19

    • SSDEEP

      768:ZrItKyw5WHXfQIhIiIk9ecAaVPD96KyX6HLLLL9:Zr3Z5IfQIR81ad5yX6HLLLL9

    Score
    8/10
    evasion

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks