Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

7

2294cb3052...cs.exe

windows7-x64

9

2294cb3052...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2294cb30527865276de7c666554cea20_NeikiAnalytics

  • Size

    143KB

  • Sample

    240511-v5qwqshe7s

  • MD5

    2294cb30527865276de7c666554cea20

  • SHA1

    34f319e1998c220b824cd4a08db81c442914ebc3

  • SHA256

    a758160c32cc9a36ace89a09b1c780cfc833f97b082a1b8140423e1505c3652e

  • SHA512

    e358cfc0c94616e3718f46643b413d01b67cbfea2ba2684877c7338ff6808f3c88b19e0a56aac020598bc71047d87993898c393b8e4f5e5017b7b00e68a8ad06

  • SSDEEP

    3072:+nymCAIuZAIuYSMjoqtMHfhfgpW0/5Zeb7:JmCAIuZAIuDMVtM/6p7q7

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      2294cb30527865276de7c666554cea20_NeikiAnalytics

    • Size

      143KB

    • MD5

      2294cb30527865276de7c666554cea20

    • SHA1

      34f319e1998c220b824cd4a08db81c442914ebc3

    • SHA256

      a758160c32cc9a36ace89a09b1c780cfc833f97b082a1b8140423e1505c3652e

    • SHA512

      e358cfc0c94616e3718f46643b413d01b67cbfea2ba2684877c7338ff6808f3c88b19e0a56aac020598bc71047d87993898c393b8e4f5e5017b7b00e68a8ad06

    • SSDEEP

      3072:+nymCAIuZAIuYSMjoqtMHfhfgpW0/5Zeb7:JmCAIuZAIuDMVtM/6p7q7

    Score
    9/10
    ransomwareupx

    • Renames multiple (3447) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.