Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
182ef97364bb9b12f59442fa3997fa00_NeikiAnalytics.exe
-
Size
12KB
-
Sample
240606-qh282aee8s
-
MD5
182ef97364bb9b12f59442fa3997fa00
-
SHA1
5967673d4fab2ccfb0e0e1c3a9e7513bd7be4bd7
-
SHA256
803d6a9b843255fe332a86c44e4708ae2d0977ea8d94e1e09cfabd9d087ae3f7
-
SHA512
df22819d6cd19a341b8d2944403295218760312a9e25c2828464d4bb3f339047ce4fbddf72c16832f5faeb3e21bec54eb882e918a890360b7ec2076af5b459b0
-
SSDEEP
384:xL7li/2zgq2DcEQvdhcJKLTp/NK9xaNx:xkM/Q9cNx
Static task
static1
Behavioral task
behavioral1
Sample
182ef97364bb9b12f59442fa3997fa00_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
182ef97364bb9b12f59442fa3997fa00_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
182ef97364bb9b12f59442fa3997fa00_NeikiAnalytics.exe
-
Size
12KB
-
MD5
182ef97364bb9b12f59442fa3997fa00
-
SHA1
5967673d4fab2ccfb0e0e1c3a9e7513bd7be4bd7
-
SHA256
803d6a9b843255fe332a86c44e4708ae2d0977ea8d94e1e09cfabd9d087ae3f7
-
SHA512
df22819d6cd19a341b8d2944403295218760312a9e25c2828464d4bb3f339047ce4fbddf72c16832f5faeb3e21bec54eb882e918a890360b7ec2076af5b459b0
-
SSDEEP
384:xL7li/2zgq2DcEQvdhcJKLTp/NK9xaNx:xkM/Q9cNx
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Uses the VBS compiler for execution
-