Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

31d404b461...KI.exe

windows7-x64

9

31d404b461...KI.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    31d404b461fa0f153b8ea4a215cee5c0_NEIKI

  • Size

    94KB

  • Sample

    240507-zt6j9sad83

  • MD5

    31d404b461fa0f153b8ea4a215cee5c0

  • SHA1

    2dc025fe5548e6a41a5d2483328585dc3a504895

  • SHA256

    46e09f548420d3cadf6db4010d96ef83bee2ecd39a96c1b763e672c8907051ab

  • SHA512

    7530f5c75d4ad13fd00cc37fb9ee20651684000645a43035309ba32f2941c9f27f0e69ffc14346779d962afbe8a241473c6ae0871e458fa8f928e4a6c4188426

  • SSDEEP

    1536:W7ZrpApojOPG0PGQJwFJwkpe+eTDPfFpsJOfFpsJCAdCjHKPN5BV:6rWpcOPxPke+e3fFpsJOfFpsJbgEv

Score
9/10
ransomware

Malware Config

Targets

    • Target

      31d404b461fa0f153b8ea4a215cee5c0_NEIKI

    • Size

      94KB

    • MD5

      31d404b461fa0f153b8ea4a215cee5c0

    • SHA1

      2dc025fe5548e6a41a5d2483328585dc3a504895

    • SHA256

      46e09f548420d3cadf6db4010d96ef83bee2ecd39a96c1b763e672c8907051ab

    • SHA512

      7530f5c75d4ad13fd00cc37fb9ee20651684000645a43035309ba32f2941c9f27f0e69ffc14346779d962afbe8a241473c6ae0871e458fa8f928e4a6c4188426

    • SSDEEP

      1536:W7ZrpApojOPG0PGQJwFJwkpe+eTDPfFpsJOfFpsJCAdCjHKPN5BV:6rWpcOPxPke+e3fFpsJOfFpsJbgEv

    Score
    9/10
    ransomware

    • Renames multiple (3471) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks