Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

4a56a5835b...KI.exe

windows7-x64

9

4a56a5835b...KI.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4a56a5835b5551dc805e929220a37a36_NEIKI

  • Size

    71KB

  • Sample

    240509-mdsbgscg2v

  • MD5

    4a56a5835b5551dc805e929220a37a36

  • SHA1

    edcfa0fa3f0027bff29eebb382cd546b767c97f5

  • SHA256

    5c141f974763c1eac0895a94ffa3ab35105aab93053ff4308ed9e5a628daabb4

  • SHA512

    6236398ab3dabaf174a1e7c5687ed096fc398a734f70ee86ae3e4745c322a8c3c338c7b4f444b9754024601d80cc32c2220b13e05e01df9724186bd01e91102e

  • SSDEEP

    768:W7BlpDpARFbhYQkQjjI6OvSox/6Sox/hotyuftxtjYJIJDYJIJX66Fl3by:W7ZDpApYbWjIlE77ufL2e+e16al3by

Score
9/10
ransomware

Malware Config

Targets

    • Target

      4a56a5835b5551dc805e929220a37a36_NEIKI

    • Size

      71KB

    • MD5

      4a56a5835b5551dc805e929220a37a36

    • SHA1

      edcfa0fa3f0027bff29eebb382cd546b767c97f5

    • SHA256

      5c141f974763c1eac0895a94ffa3ab35105aab93053ff4308ed9e5a628daabb4

    • SHA512

      6236398ab3dabaf174a1e7c5687ed096fc398a734f70ee86ae3e4745c322a8c3c338c7b4f444b9754024601d80cc32c2220b13e05e01df9724186bd01e91102e

    • SSDEEP

      768:W7BlpDpARFbhYQkQjjI6OvSox/6Sox/hotyuftxtjYJIJDYJIJX66Fl3by:W7ZDpApYbWjIlE77ufL2e+e16al3by

    Score
    9/10
    ransomware

    • Renames multiple (3735) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks