Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    4974daec28d7fcb3b5f1dd99dc53deb0_NeikiAnalytics.exe

  • Size

    119KB

  • Sample

    240607-k8l2vafb64

  • MD5

    4974daec28d7fcb3b5f1dd99dc53deb0

  • SHA1

    1e1b3710dab68d6a3ad5c1cb700394932aceac3c

  • SHA256

    dd721ce1189509484d284e683e16d46480c2df77328fc58934ef79515637bd70

  • SHA512

    055c007cd3e57f59b3fd2e80c0c7d9387aaa7ce42bd545c7e1fc14bf466b86188efad3d19e6b33283281d7f16f7d8534b9354934001da457539082c576019839

  • SSDEEP

    3072:TY38io2GKPRBa2lQBV+UdE+rECWp7hKvPF:TY3XiKPfgBV+UdvrEFp7hK1

Score
8/10

Malware Config

Targets

    • Target

      4974daec28d7fcb3b5f1dd99dc53deb0_NeikiAnalytics.exe

    • Size

      119KB

    • MD5

      4974daec28d7fcb3b5f1dd99dc53deb0

    • SHA1

      1e1b3710dab68d6a3ad5c1cb700394932aceac3c

    • SHA256

      dd721ce1189509484d284e683e16d46480c2df77328fc58934ef79515637bd70

    • SHA512

      055c007cd3e57f59b3fd2e80c0c7d9387aaa7ce42bd545c7e1fc14bf466b86188efad3d19e6b33283281d7f16f7d8534b9354934001da457539082c576019839

    • SSDEEP

      3072:TY38io2GKPRBa2lQBV+UdE+rECWp7hKvPF:TY3XiKPfgBV+UdvrEFp7hK1

    Score
    8/10
    • Modifies AppInit DLL entries

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks