Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    5b5898dc23b7c45b78d7bac580372c96fd034784681d154ad840a103c4c482df_NeikiAnalytics.exe

  • Size

    232KB

  • Sample

    240620-nbdkzsycpl

  • MD5

    04b80b90cd6db9230749ad60419be210

  • SHA1

    093767add842b3b887761a54e283807d28ed9dde

  • SHA256

    5b5898dc23b7c45b78d7bac580372c96fd034784681d154ad840a103c4c482df

  • SHA512

    d105edbd71ebf9ae2e7f7e9d2de4c8da9a51b087bd32caa4726b84536db8ed462090dcc45cc3ec422d00e3b444249e5271d7d338fd8a9fd4d6692ec07f663d1e

  • SSDEEP

    6144:s1UDRcn5R2C1mZ7qAkklcFcwUZcFAVJKyIfgA/:s1eRC5T1mZ2pkqWVDIfgw

Malware Config

Targets

    • Target

      5b5898dc23b7c45b78d7bac580372c96fd034784681d154ad840a103c4c482df_NeikiAnalytics.exe

    • Size

      232KB

    • MD5

      04b80b90cd6db9230749ad60419be210

    • SHA1

      093767add842b3b887761a54e283807d28ed9dde

    • SHA256

      5b5898dc23b7c45b78d7bac580372c96fd034784681d154ad840a103c4c482df

    • SHA512

      d105edbd71ebf9ae2e7f7e9d2de4c8da9a51b087bd32caa4726b84536db8ed462090dcc45cc3ec422d00e3b444249e5271d7d338fd8a9fd4d6692ec07f663d1e

    • SSDEEP

      6144:s1UDRcn5R2C1mZ7qAkklcFcwUZcFAVJKyIfgA/:s1eRC5T1mZ2pkqWVDIfgw

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v15

Tasks