Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

8fd3cc3911...cs.exe

windows7-x64

9

8fd3cc3911...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8fd3cc39115547b7ca4944a980d753c0_NeikiAnalytics

  • Size

    142KB

  • Sample

    240511-gv9zzahf31

  • MD5

    8fd3cc39115547b7ca4944a980d753c0

  • SHA1

    720c8240cfe91a0a38808290028afc5a4095c616

  • SHA256

    b5e281bad1bdc8b24ec75c0a8c606fd4af8e623d2f4783d9cf3b23e5935fea8c

  • SHA512

    cf22756f8776bcdac59923e594aa5603bde511e0191dc737d2b79739d09639adfafd25be4a70fd6d410c48b23ffef9d7d51110da596cb149a2cc08c946ec43df

  • SSDEEP

    3072:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFslEhLfyBU:PqFF2Ie+efFqFF2Ie+efnfJ

Score
9/10
ransomware

Malware Config

Targets

    • Target

      8fd3cc39115547b7ca4944a980d753c0_NeikiAnalytics

    • Size

      142KB

    • MD5

      8fd3cc39115547b7ca4944a980d753c0

    • SHA1

      720c8240cfe91a0a38808290028afc5a4095c616

    • SHA256

      b5e281bad1bdc8b24ec75c0a8c606fd4af8e623d2f4783d9cf3b23e5935fea8c

    • SHA512

      cf22756f8776bcdac59923e594aa5603bde511e0191dc737d2b79739d09639adfafd25be4a70fd6d410c48b23ffef9d7d51110da596cb149a2cc08c946ec43df

    • SSDEEP

      3072:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFslEhLfyBU:PqFF2Ie+efFqFF2Ie+efnfJ

    Score
    9/10
    ransomware

    • Renames multiple (5773) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks