Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    7a80a18769deae2e547c49fbd477c4c0_NeikiAnalytics.exe

  • Size

    52KB

  • Sample

    240613-n84tfaxgqd

  • MD5

    7a80a18769deae2e547c49fbd477c4c0

  • SHA1

    639a6d4f7591e95f31f4905e53f75429a09ef3dd

  • SHA256

    8ec10cde52807baf1ab0924ced2ea9bb69ef522b579a52ee697e68dd40ef50ca

  • SHA512

    4da9ee86c8443281502d9cbef81170c857f3e34683cfdaafaa4933ee75b7cdb916f93a52087d7f702b10dac1159763604da134249c3f12bf5dfdb0244bfd7668

  • SSDEEP

    1536:N5VzcfA/6LrVpL74gfh16no3+AaKJyHH5:/V2A/gVh74gpg3AaOG

Malware Config

Targets

    • Target

      7a80a18769deae2e547c49fbd477c4c0_NeikiAnalytics.exe

    • Size

      52KB

    • MD5

      7a80a18769deae2e547c49fbd477c4c0

    • SHA1

      639a6d4f7591e95f31f4905e53f75429a09ef3dd

    • SHA256

      8ec10cde52807baf1ab0924ced2ea9bb69ef522b579a52ee697e68dd40ef50ca

    • SHA512

      4da9ee86c8443281502d9cbef81170c857f3e34683cfdaafaa4933ee75b7cdb916f93a52087d7f702b10dac1159763604da134249c3f12bf5dfdb0244bfd7668

    • SSDEEP

      1536:N5VzcfA/6LrVpL74gfh16no3+AaKJyHH5:/V2A/gVh74gpg3AaOG

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks