Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

7

93dc5f73d0...cs.exe

windows7-x64

9

93dc5f73d0...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    93dc5f73d006528814568b1c67ec5db0_NeikiAnalytics

  • Size

    100KB

  • Sample

    240511-ha6x9adc88

  • MD5

    93dc5f73d006528814568b1c67ec5db0

  • SHA1

    13714c921e66a15fa58868bfaa31e528290dbfba

  • SHA256

    66a4245a7d86a810b14f7acdc99b5a5cbac77ed795ee82d74ea076d59311081d

  • SHA512

    6cd6e8b6e140823787175b2f6c2a76bc9d06547fa754dbf61ad164a0e92d6894cb9d7fe820a4b17d3b16fb52bf4490c648473af60dfd5b75de786f5238e9f26c

  • SSDEEP

    1536:Isz1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCow8hf5Sg:hfAIuZAIuYSMjoqtMHfhf5Sg

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      93dc5f73d006528814568b1c67ec5db0_NeikiAnalytics

    • Size

      100KB

    • MD5

      93dc5f73d006528814568b1c67ec5db0

    • SHA1

      13714c921e66a15fa58868bfaa31e528290dbfba

    • SHA256

      66a4245a7d86a810b14f7acdc99b5a5cbac77ed795ee82d74ea076d59311081d

    • SHA512

      6cd6e8b6e140823787175b2f6c2a76bc9d06547fa754dbf61ad164a0e92d6894cb9d7fe820a4b17d3b16fb52bf4490c648473af60dfd5b75de786f5238e9f26c

    • SSDEEP

      1536:Isz1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCow8hf5Sg:hfAIuZAIuYSMjoqtMHfhf5Sg

    Score
    9/10
    ransomwareupx

    • Renames multiple (3437) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks