Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    6764ed6eb13622394c4e9d13f6872c50_NeikiAnalytics.exe

  • Size

    29KB

  • Sample

    240613-hrcqqsycja

  • MD5

    6764ed6eb13622394c4e9d13f6872c50

  • SHA1

    47c97382173f93e5ead87e467d4a33489e48403d

  • SHA256

    d1f8a04a9f95f1896f963870292b705a6af86d9c6db7abbd3b96ed4db0aa1113

  • SHA512

    5d7ce0254b0b881254d0f19ae271ad779c9f230cbafbe0670200a12cc05b912bf21acf88548addee844dab8f07045f207e702d8be3771f3be93357a2d740933c

  • SSDEEP

    768:X9J/3FzjgfanEGx8V36unjv88tznuRU65Y4gpph1ePVCMPLK1:N5VzcfA/6LrVpL74gfh16nzm

Malware Config

Targets

    • Target

      6764ed6eb13622394c4e9d13f6872c50_NeikiAnalytics.exe

    • Size

      29KB

    • MD5

      6764ed6eb13622394c4e9d13f6872c50

    • SHA1

      47c97382173f93e5ead87e467d4a33489e48403d

    • SHA256

      d1f8a04a9f95f1896f963870292b705a6af86d9c6db7abbd3b96ed4db0aa1113

    • SHA512

      5d7ce0254b0b881254d0f19ae271ad779c9f230cbafbe0670200a12cc05b912bf21acf88548addee844dab8f07045f207e702d8be3771f3be93357a2d740933c

    • SSDEEP

      768:X9J/3FzjgfanEGx8V36unjv88tznuRU65Y4gpph1ePVCMPLK1:N5VzcfA/6LrVpL74gfh16nzm

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks