Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

3893a68c03...KI.exe

windows7-x64

9

3893a68c03...KI.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3893a68c030f5b57fc692a3c90bd7640_NEIKI

  • Size

    72KB

  • Sample

    240507-z6ktbsbb96

  • MD5

    3893a68c030f5b57fc692a3c90bd7640

  • SHA1

    5c85677e467784e8b645b958a36b881d326e11e1

  • SHA256

    99b283c9c3c1502267ea93eaf8bf3c7376ef26fea305ff7b8874dacce6473537

  • SHA512

    30210a90b8f51f9e8c75d9b40edafffa3a1df17cffc730a2ea40de14672a6ff31a1ad83d7aed513c77c5c403fd8fccf8392bc475a25f3b8d0041b73c7bd9a85d

  • SSDEEP

    1536:W7ZhA7pApH1d9oVLQthbqbY9oVLQthbq51Rn6wt7try1f:6e7WpP9oVLQthbYY9oVLQthbUrt7tryp

Score
9/10
ransomware

Malware Config

Targets

    • Target

      3893a68c030f5b57fc692a3c90bd7640_NEIKI

    • Size

      72KB

    • MD5

      3893a68c030f5b57fc692a3c90bd7640

    • SHA1

      5c85677e467784e8b645b958a36b881d326e11e1

    • SHA256

      99b283c9c3c1502267ea93eaf8bf3c7376ef26fea305ff7b8874dacce6473537

    • SHA512

      30210a90b8f51f9e8c75d9b40edafffa3a1df17cffc730a2ea40de14672a6ff31a1ad83d7aed513c77c5c403fd8fccf8392bc475a25f3b8d0041b73c7bd9a85d

    • SSDEEP

      1536:W7ZhA7pApH1d9oVLQthbqbY9oVLQthbq51Rn6wt7try1f:6e7WpP9oVLQthbYY9oVLQthbUrt7tryp

    Score
    9/10
    ransomware

    • Renames multiple (3689) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks