Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
0bc981a20b992bf4c1a7570e18a241a0_NeikiAnalytics.exe
-
Size
22KB
-
Sample
240603-2glenscd29
-
MD5
0bc981a20b992bf4c1a7570e18a241a0
-
SHA1
a4919985e8347d63869a08457459f56968276938
-
SHA256
9d3068da671bc217b3f0b51711f1f7eae182f4cf517e5a13b289ddfe0910cce9
-
SHA512
3a7c39a6e0d3d35ca5f4b772a0abc8aac182ea4416566d312d6167cc0951edce6a7617701369093f5dac7cb30dc70b18e621d22bfc82c67a28eed5952f64d9d2
-
SSDEEP
384:TdR8iQLoFx1jW5sIiR5tGD4ZQWnYPLqeMn543lMt:Tr8X+GsHRGYFt54V2
Static task
static1
Behavioral task
behavioral1
Sample
0bc981a20b992bf4c1a7570e18a241a0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0bc981a20b992bf4c1a7570e18a241a0_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
0bc981a20b992bf4c1a7570e18a241a0_NeikiAnalytics.exe
-
Size
22KB
-
MD5
0bc981a20b992bf4c1a7570e18a241a0
-
SHA1
a4919985e8347d63869a08457459f56968276938
-
SHA256
9d3068da671bc217b3f0b51711f1f7eae182f4cf517e5a13b289ddfe0910cce9
-
SHA512
3a7c39a6e0d3d35ca5f4b772a0abc8aac182ea4416566d312d6167cc0951edce6a7617701369093f5dac7cb30dc70b18e621d22bfc82c67a28eed5952f64d9d2
-
SSDEEP
384:TdR8iQLoFx1jW5sIiR5tGD4ZQWnYPLqeMn543lMt:Tr8X+GsHRGYFt54V2
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-