Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

0101e8bd91...cs.exe

windows7-x64

9

0101e8bd91...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0101e8bd91eb75a3de3ab5ba5d420c00_NeikiAnalytics

  • Size

    95KB

  • Sample

    240510-zp22aahb5x

  • MD5

    0101e8bd91eb75a3de3ab5ba5d420c00

  • SHA1

    2ef0a43dfadbefb4be8535edf03f62aa1420d673

  • SHA256

    47632db62756e788dfa79c487d82aba76362748f0f7a6502ef4d301afe7b2251

  • SHA512

    e68dc46bdd68119d4a16262d68739650934298849d6764b48a284c58984c453a96a833ac95120dca981b56f3330c23907b02747003ca3480b582945798dacf99

  • SSDEEP

    1536:W7ZrpApojOPG0PGQJwFJwkpe+eTDPfFpsJOfFpsJCAdCjHKP26n:6rWpcOPxPke+e3fFpsJOfFpsJbgER

Score
9/10
ransomware

Malware Config

Targets

    • Target

      0101e8bd91eb75a3de3ab5ba5d420c00_NeikiAnalytics

    • Size

      95KB

    • MD5

      0101e8bd91eb75a3de3ab5ba5d420c00

    • SHA1

      2ef0a43dfadbefb4be8535edf03f62aa1420d673

    • SHA256

      47632db62756e788dfa79c487d82aba76362748f0f7a6502ef4d301afe7b2251

    • SHA512

      e68dc46bdd68119d4a16262d68739650934298849d6764b48a284c58984c453a96a833ac95120dca981b56f3330c23907b02747003ca3480b582945798dacf99

    • SSDEEP

      1536:W7ZrpApojOPG0PGQJwFJwkpe+eTDPfFpsJOfFpsJCAdCjHKP26n:6rWpcOPxPke+e3fFpsJOfFpsJbgER

    Score
    9/10
    ransomware

    • Renames multiple (3450) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks