cf056eef42c6c29e6f04e592c0a01fd04224e19dc2e3920e6631d7b1061d74a4 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

4a8e5a3af4...cs.dll

windows7-x64

7

4a8e5a3af4...cs.dll

windows10-2004-x64

6

Sharing

General

Target

4a8e5a3af4ea20df121c53aef8131e60_NeikiAnalytics.exe
Size

472KB
Sample

240605-jzl5tabb89
MD5

4a8e5a3af4ea20df121c53aef8131e60
SHA1

95052233e658df40c50e241bdb8bc0af96964642
SHA256

cf056eef42c6c29e6f04e592c0a01fd04224e19dc2e3920e6631d7b1061d74a4
SHA512

955dd4091944792842f51de3006f9313e2e4a740fd71db28f169b87c7144876246255d293c0b2fc70a1c605710d1f94a2fec1ff3e17ca0dc86ae6446ee93ba1a
SSDEEP

6144:4i05kH9OyU2uv5SRf/FWgFgtH+gqIRAUW9kVYeVprU4wfhTv5xD2ZP0GVGdXcukE:LrHGPv5SmptHDDmUWuVZkxikdXcq

Score

7^/10

persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

4a8e5a3af4ea20df121c53aef8131e60_NeikiAnalytics.dll

Resource

win7-20240221-en

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

4a8e5a3af4ea20df121c53aef8131e60_NeikiAnalytics.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  4a8e5a3af4ea20df121c53aef8131e60_NeikiAnalytics.exe
- Size
  
  472KB
- MD5
  
  4a8e5a3af4ea20df121c53aef8131e60
- SHA1
  
  95052233e658df40c50e241bdb8bc0af96964642
- SHA256
  
  cf056eef42c6c29e6f04e592c0a01fd04224e19dc2e3920e6631d7b1061d74a4
- SHA512
  
  955dd4091944792842f51de3006f9313e2e4a740fd71db28f169b87c7144876246255d293c0b2fc70a1c605710d1f94a2fec1ff3e17ca0dc86ae6446ee93ba1a
- SSDEEP
  
  6144:4i05kH9OyU2uv5SRf/FWgFgtH+gqIRAUW9kVYeVprU4wfhTv5xD2ZP0GVGdXcukE:LrHGPv5SmptHDDmUWuVZkxikdXcq
Score

7^/10

persistence
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.