Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    7a2fb71f905b078691d5398340792956c3e26f69b225e1c3259cc252a1a48a0a_NeikiAnalytics.exe

  • Size

    404KB

  • Sample

    240629-hlnk2swcmm

  • MD5

    0f6707fd84e4a27461c9de6a69d3fd00

  • SHA1

    6dc68e6d4e395a1e4b28b0a28185508e38456e38

  • SHA256

    7a2fb71f905b078691d5398340792956c3e26f69b225e1c3259cc252a1a48a0a

  • SHA512

    f626b7c2fee4f25ecdf81ec7bff1c5018d2ce1d2ad1ce358b0c84d5a6fca332ffacdbf959f4b49bc77a7bd02be7121a7aae0a2c4a035d6ad5e0889c4f3409e2c

  • SSDEEP

    6144:/CdXyf/Gx2ZENm+3Mpui6yYPaIGckfru5xyDpui6yYPaIGckSU05836S5:/CdXlwcMpV6yYP4rbpV6yYPg058KS

Score
10/10

Malware Config

Targets

    • Target

      7a2fb71f905b078691d5398340792956c3e26f69b225e1c3259cc252a1a48a0a_NeikiAnalytics.exe

    • Size

      404KB

    • MD5

      0f6707fd84e4a27461c9de6a69d3fd00

    • SHA1

      6dc68e6d4e395a1e4b28b0a28185508e38456e38

    • SHA256

      7a2fb71f905b078691d5398340792956c3e26f69b225e1c3259cc252a1a48a0a

    • SHA512

      f626b7c2fee4f25ecdf81ec7bff1c5018d2ce1d2ad1ce358b0c84d5a6fca332ffacdbf959f4b49bc77a7bd02be7121a7aae0a2c4a035d6ad5e0889c4f3409e2c

    • SSDEEP

      6144:/CdXyf/Gx2ZENm+3Mpui6yYPaIGckfru5xyDpui6yYPaIGckSU05836S5:/CdXlwcMpV6yYP4rbpV6yYPg058KS

    Score
    10/10
    • Adds autorun key to be loaded by Explorer.exe on startup

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks