Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

7

4a1e3259f4...cs.exe

windows7-x64

9

4a1e3259f4...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4a1e3259f414a2c45dde72436d677d60_NeikiAnalytics

  • Size

    247KB

  • Sample

    240511-3ldfasec2v

  • MD5

    4a1e3259f414a2c45dde72436d677d60

  • SHA1

    ad74b91bf543f6771b6736b8999c3caf3e39b946

  • SHA256

    c6c97610ac279b7f0648447b5db35366016a85969e5eeb6fc39f14d160b988cb

  • SHA512

    84c1fee510631c21a37511594fe4d5ccd283dd741dfd98fb57babaae18e41f6c776a6eb6e5e8dfa63731278f75b9e690ccb617ad10ee4f477b36e89b53c556e6

  • SSDEEP

    6144:JmCAIuZAIuDMVtM/XSDfAIuZAIuDMVtM/XSAPxPE:7AIuZAIuOYS7AIuZAIuOYSAPxPE

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      4a1e3259f414a2c45dde72436d677d60_NeikiAnalytics

    • Size

      247KB

    • MD5

      4a1e3259f414a2c45dde72436d677d60

    • SHA1

      ad74b91bf543f6771b6736b8999c3caf3e39b946

    • SHA256

      c6c97610ac279b7f0648447b5db35366016a85969e5eeb6fc39f14d160b988cb

    • SHA512

      84c1fee510631c21a37511594fe4d5ccd283dd741dfd98fb57babaae18e41f6c776a6eb6e5e8dfa63731278f75b9e690ccb617ad10ee4f477b36e89b53c556e6

    • SSDEEP

      6144:JmCAIuZAIuDMVtM/XSDfAIuZAIuDMVtM/XSAPxPE:7AIuZAIuOYS7AIuZAIuOYSAPxPE

    Score
    9/10
    ransomwareupx

    • Renames multiple (2851) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks