Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

d21a93ea10...cs.exe

windows7-x64

9

d21a93ea10...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d21a93ea107b8396c94d5d00e8136800_NeikiAnalytics

  • Size

    84KB

  • Sample

    240510-nlssnabg3w

  • MD5

    d21a93ea107b8396c94d5d00e8136800

  • SHA1

    ca7a2bbd39d0af9d8c4175a11cd6af9517cd7cd4

  • SHA256

    749b2326c1e8f24b704daf4df3f7ea7c6b49f61e8a3bd81c161a77d19a00fb67

  • SHA512

    14179a20822dfd6ce6c9966da74bcbaa9b70886abb8e0b27142b3217c28248cc73a804411a7bd39f64fe1195a1427ab88bbb07fe39aec819eb11ff54619d9953

  • SSDEEP

    1536:W7ZrpApojOPG0PGQJwFJwkpe+eTDPfFpsJOfFpsJCAdCjHKPq0:6rWpcOPxPke+e3fFpsJOfFpsJbgET

Score
9/10
ransomware

Malware Config

Targets

    • Target

      d21a93ea107b8396c94d5d00e8136800_NeikiAnalytics

    • Size

      84KB

    • MD5

      d21a93ea107b8396c94d5d00e8136800

    • SHA1

      ca7a2bbd39d0af9d8c4175a11cd6af9517cd7cd4

    • SHA256

      749b2326c1e8f24b704daf4df3f7ea7c6b49f61e8a3bd81c161a77d19a00fb67

    • SHA512

      14179a20822dfd6ce6c9966da74bcbaa9b70886abb8e0b27142b3217c28248cc73a804411a7bd39f64fe1195a1427ab88bbb07fe39aec819eb11ff54619d9953

    • SSDEEP

      1536:W7ZrpApojOPG0PGQJwFJwkpe+eTDPfFpsJOfFpsJCAdCjHKPq0:6rWpcOPxPke+e3fFpsJOfFpsJbgET

    Score
    9/10
    ransomware

    • Renames multiple (3434) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks