Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    5079312b00cdb29097b2e9f54ee44d90_NeikiAnalytics.exe

  • Size

    133KB

  • Sample

    240605-mkg44adh74

  • MD5

    5079312b00cdb29097b2e9f54ee44d90

  • SHA1

    ee5c5830b06cf7e1890960b44ee0b83566e801b1

  • SHA256

    eb78bb21aebc3bbea96e589c71c198bc3b4c625009e7ea064266c9dd0713669c

  • SHA512

    7054d49152d45bfa24e69d442a0f0d0334878e3484b405ca67e37c715cda6d2545990698be6d7d47944c5809112a68ac64af9f3252a3b73b95d24ef33b8ef74c

  • SSDEEP

    3072:VEboFVlGAvwsgbpvYfMTc72L10fPsout6nnn:KBzsgbpvnTcyOPsoS6nnn

Score
7/10
upx

Malware Config

Targets

    • Target

      5079312b00cdb29097b2e9f54ee44d90_NeikiAnalytics.exe

    • Size

      133KB

    • MD5

      5079312b00cdb29097b2e9f54ee44d90

    • SHA1

      ee5c5830b06cf7e1890960b44ee0b83566e801b1

    • SHA256

      eb78bb21aebc3bbea96e589c71c198bc3b4c625009e7ea064266c9dd0713669c

    • SHA512

      7054d49152d45bfa24e69d442a0f0d0334878e3484b405ca67e37c715cda6d2545990698be6d7d47944c5809112a68ac64af9f3252a3b73b95d24ef33b8ef74c

    • SSDEEP

      3072:VEboFVlGAvwsgbpvYfMTc72L10fPsout6nnn:KBzsgbpvnTcyOPsoS6nnn

    Score
    7/10
    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks