Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    20aba42557ccc3d6fa6ae547f8814ba0_NeikiAnalytics.exe

  • Size

    45KB

  • Sample

    240606-2cscesea26

  • MD5

    20aba42557ccc3d6fa6ae547f8814ba0

  • SHA1

    ab4ef17f5f2750b258bf326ecd93b67cc4666eae

  • SHA256

    eba4546423950f453ca8d70d1fb0b624c25f71f0e328bc87fa37bf0d9496add0

  • SHA512

    60d1a3b3b52a179f24434d81e5295512fd43eee2478add711e584fbf3e74897e106132ec8e2fb14d398a53573936ae2ba246988f9d43a613dcf01557269c815d

  • SSDEEP

    768:WAUJmQCcmLCXQq6fsKiJYsIkjJVzqsVG5kuGVAQvBucNx:RUNHFKQbIkHvGkAOX

Malware Config

Targets

    • Target

      20aba42557ccc3d6fa6ae547f8814ba0_NeikiAnalytics.exe

    • Size

      45KB

    • MD5

      20aba42557ccc3d6fa6ae547f8814ba0

    • SHA1

      ab4ef17f5f2750b258bf326ecd93b67cc4666eae

    • SHA256

      eba4546423950f453ca8d70d1fb0b624c25f71f0e328bc87fa37bf0d9496add0

    • SHA512

      60d1a3b3b52a179f24434d81e5295512fd43eee2478add711e584fbf3e74897e106132ec8e2fb14d398a53573936ae2ba246988f9d43a613dcf01557269c815d

    • SSDEEP

      768:WAUJmQCcmLCXQq6fsKiJYsIkjJVzqsVG5kuGVAQvBucNx:RUNHFKQbIkHvGkAOX

    • Windows security bypass

    • Drops file in Drivers directory

    • Modifies Installed Components in the registry

    • Sets file execution options in registry

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

    • Modifies WinLogon

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks