Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
256790a9c5b61eac61c88fc946501a50_NeikiAnalytics.exe
-
Size
66KB
-
Sample
240611-djnqta1hqa
-
MD5
256790a9c5b61eac61c88fc946501a50
-
SHA1
65ea5473cdafb9b124eebd780f5f305e4d88303c
-
SHA256
290549df7c08227c1f9f25d25264ba6cb6420200c0277ebb3c3c50b6e1886cbe
-
SHA512
709c473b64384f40b89f5e5bd9c50c624d6dba9dac752ec5e3bf7da42875a50140b5fb13cc872d9a11d4755d18eb44e7b2c1528b86dcdb90b4902b266a6ea853
-
SSDEEP
1536:EHfetdklPp+07gDSrB8Xru2zGeJxgawTzpXzrDJrXia:IeklMMYJhqezw/pXzH9ia
Static task
static1
Behavioral task
behavioral1
Sample
256790a9c5b61eac61c88fc946501a50_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
256790a9c5b61eac61c88fc946501a50_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
256790a9c5b61eac61c88fc946501a50_NeikiAnalytics.exe
-
Size
66KB
-
MD5
256790a9c5b61eac61c88fc946501a50
-
SHA1
65ea5473cdafb9b124eebd780f5f305e4d88303c
-
SHA256
290549df7c08227c1f9f25d25264ba6cb6420200c0277ebb3c3c50b6e1886cbe
-
SHA512
709c473b64384f40b89f5e5bd9c50c624d6dba9dac752ec5e3bf7da42875a50140b5fb13cc872d9a11d4755d18eb44e7b2c1528b86dcdb90b4902b266a6ea853
-
SSDEEP
1536:EHfetdklPp+07gDSrB8Xru2zGeJxgawTzpXzrDJrXia:IeklMMYJhqezw/pXzH9ia
Score10/10-
Modifies WinLogon for persistence
-
Modifies visiblity of hidden/system files in Explorer
-
Modifies Installed Components in the registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
3Registry Run Keys / Startup Folder
2Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
3Registry Run Keys / Startup Folder
2Winlogon Helper DLL
1