Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
9ead5d837b1228c8462fb7524f5ddab0_NeikiAnalytics.exe
-
Size
5.7MB
-
Sample
240603-g88ztseg2s
-
MD5
9ead5d837b1228c8462fb7524f5ddab0
-
SHA1
8a5f21e9ae6333c62de86350882ec146e2b6d570
-
SHA256
bc2068ff282a5057822e21a59b74b4f6e65b0002b7712bc37293257345795f6e
-
SHA512
a817b47c4a3571b7b38015fecab6953502cca8b48b96ccb277b103756e0856b226df09294405daa608c4a58543d55b90b2477d2aef478453b56aee8fad26da25
-
SSDEEP
98304:z04VhN/AF1O+hyaf8UkTsUAc9HZKbaI0b4ekMZcGEjIC0OG/iyAC8LR34Z:z0WxAF1OAyaf8MUAGZAajEMdOQi5PI
Behavioral task
behavioral1
Sample
9ead5d837b1228c8462fb7524f5ddab0_NeikiAnalytics.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
9ead5d837b1228c8462fb7524f5ddab0_NeikiAnalytics.exe
-
Size
5.7MB
-
MD5
9ead5d837b1228c8462fb7524f5ddab0
-
SHA1
8a5f21e9ae6333c62de86350882ec146e2b6d570
-
SHA256
bc2068ff282a5057822e21a59b74b4f6e65b0002b7712bc37293257345795f6e
-
SHA512
a817b47c4a3571b7b38015fecab6953502cca8b48b96ccb277b103756e0856b226df09294405daa608c4a58543d55b90b2477d2aef478453b56aee8fad26da25
-
SSDEEP
98304:z04VhN/AF1O+hyaf8UkTsUAc9HZKbaI0b4ekMZcGEjIC0OG/iyAC8LR34Z:z0WxAF1OAyaf8MUAGZAajEMdOQi5PI
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-