Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

071cfd381d...cs.exe

windows7-x64

7

071cfd381d...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    071cfd381d04e3605c6153d139690270_NeikiAnalytics.exe

  • Size

    94KB

  • Sample

    240610-c2t5waah6y

  • MD5

    071cfd381d04e3605c6153d139690270

  • SHA1

    06626cc57f478bed5fbb41a97f4f8ebbce3affb8

  • SHA256

    a0687c2f185d2b4a559afa6d5b35e27454544aa2240c857d330afbfaf1c727b8

  • SHA512

    7f37e904649dd55fd3c072c4edaaced8b35c7023bad86a4adc4578f8b8685d2fceb38706082303985d0405a9ab6108193bfc0b69cf36e0565dc8ea25146844cd

  • SSDEEP

    1536:PGYU/W2/HG6QMauSV3ixJHABLrmhH7i9CO+WHg7zRZICrWaGZh7uSS:PfU/WF6QMauSuiWNi9CO+WARJrWNZVS

Score
7/10
persistence

Malware Config

Targets

    • Target

      071cfd381d04e3605c6153d139690270_NeikiAnalytics.exe

    • Size

      94KB

    • MD5

      071cfd381d04e3605c6153d139690270

    • SHA1

      06626cc57f478bed5fbb41a97f4f8ebbce3affb8

    • SHA256

      a0687c2f185d2b4a559afa6d5b35e27454544aa2240c857d330afbfaf1c727b8

    • SHA512

      7f37e904649dd55fd3c072c4edaaced8b35c7023bad86a4adc4578f8b8685d2fceb38706082303985d0405a9ab6108193bfc0b69cf36e0565dc8ea25146844cd

    • SSDEEP

      1536:PGYU/W2/HG6QMauSV3ixJHABLrmhH7i9CO+WHg7zRZICrWaGZh7uSS:PfU/WF6QMauSuiWNi9CO+WARJrWNZVS

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks