Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

4ff2214ef7...KI.exe

windows7-x64

9

4ff2214ef7...KI.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4ff2214ef747f2219c6ccbd5d7785ca0_NEIKI

  • Size

    31KB

  • Sample

    240508-ztqttahg84

  • MD5

    4ff2214ef747f2219c6ccbd5d7785ca0

  • SHA1

    65cce7967362fa45e8134f10ec3b3994c148c2f0

  • SHA256

    c9ac674ddc7ac1f34868db3dc329cb2c5af80d228d6729d75e0e1a03ea044d02

  • SHA512

    f4064c7eb93640c7931ef9713b1fbc483bae0c57e873886cde483a789b9a5372a013d251f4408f9189ce63784a85c80954f407c72b970b805d3851df3ca07d6f

  • SSDEEP

    384:GBt7Br5xjLfAgA71FbhvP+7QEfQEijajHjr3Uh0URElali:W7BlpDpARFbhYQkQjjI3Uh0UREIo

Score
9/10
ransomware

Malware Config

Targets

    • Target

      4ff2214ef747f2219c6ccbd5d7785ca0_NEIKI

    • Size

      31KB

    • MD5

      4ff2214ef747f2219c6ccbd5d7785ca0

    • SHA1

      65cce7967362fa45e8134f10ec3b3994c148c2f0

    • SHA256

      c9ac674ddc7ac1f34868db3dc329cb2c5af80d228d6729d75e0e1a03ea044d02

    • SHA512

      f4064c7eb93640c7931ef9713b1fbc483bae0c57e873886cde483a789b9a5372a013d251f4408f9189ce63784a85c80954f407c72b970b805d3851df3ca07d6f

    • SSDEEP

      384:GBt7Br5xjLfAgA71FbhvP+7QEfQEijajHjr3Uh0URElali:W7BlpDpARFbhYQkQjjI3Uh0UREIo

    Score
    9/10
    ransomware

    • Renames multiple (3745) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks