Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
88522cfd871a8d5d6825e03305fd26a0_NEIKI
-
Size
297KB
-
Sample
240508-bfr8qacg96
-
MD5
88522cfd871a8d5d6825e03305fd26a0
-
SHA1
7c401c11ba165b243ab14fac5cd5a78b878e811e
-
SHA256
cde1829aa846cf65afc4839eb6e7df0f7811bb0a43d8eab29cd23045d3ae83b5
-
SHA512
01dab607f3e6860ac938268b99144b5ea4d94fd3d71dac061bd70d67bd4888cb573e0d1f224dcd3bb16cb29fc0f7153a53072576b90268a591edf8ee163f3263
-
SSDEEP
6144:RqKvb0CYJ973e+eKZ56itOImvjngu7/BRXF8z/LYIXiY2+8AFC:vvbxYX7Z56OOrvLLe7LYIXiY2+zFC
Static task
static1
Behavioral task
behavioral1
Sample
88522cfd871a8d5d6825e03305fd26a0_NEIKI.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
88522cfd871a8d5d6825e03305fd26a0_NEIKI.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
88522cfd871a8d5d6825e03305fd26a0_NEIKI
-
Size
297KB
-
MD5
88522cfd871a8d5d6825e03305fd26a0
-
SHA1
7c401c11ba165b243ab14fac5cd5a78b878e811e
-
SHA256
cde1829aa846cf65afc4839eb6e7df0f7811bb0a43d8eab29cd23045d3ae83b5
-
SHA512
01dab607f3e6860ac938268b99144b5ea4d94fd3d71dac061bd70d67bd4888cb573e0d1f224dcd3bb16cb29fc0f7153a53072576b90268a591edf8ee163f3263
-
SSDEEP
6144:RqKvb0CYJ973e+eKZ56itOImvjngu7/BRXF8z/LYIXiY2+8AFC:vvbxYX7Z56OOrvLLe7LYIXiY2+zFC
Score9/10-
Renames multiple (2839) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-