Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

7

0cfcf09ed5...cs.exe

windows7-x64

9

0cfcf09ed5...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0cfcf09ed50d4dc46c5f690e3dc5da30_NeikiAnalytics

  • Size

    102KB

  • Sample

    240512-pqbwdahh59

  • MD5

    0cfcf09ed50d4dc46c5f690e3dc5da30

  • SHA1

    15f63479f22e1cbfa49600b7a51f2735075edc14

  • SHA256

    89c05bf33b20e79dca6a2dbdf9cd6321ab5e367ed41079acce13d166191564fd

  • SHA512

    d2c1463e61a933f28b5201e8f96cf584a15ddcb418b9041b6d209c7cddc20ea12cc2eb7ca5df9def36ae833ce6b4dc5cea672a198aeb0e4a3ea2fafeb90f1934

  • SSDEEP

    1536:Isz1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCow8hfC:hfAIuZAIuYSMjoqtMHfhfC

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      0cfcf09ed50d4dc46c5f690e3dc5da30_NeikiAnalytics

    • Size

      102KB

    • MD5

      0cfcf09ed50d4dc46c5f690e3dc5da30

    • SHA1

      15f63479f22e1cbfa49600b7a51f2735075edc14

    • SHA256

      89c05bf33b20e79dca6a2dbdf9cd6321ab5e367ed41079acce13d166191564fd

    • SHA512

      d2c1463e61a933f28b5201e8f96cf584a15ddcb418b9041b6d209c7cddc20ea12cc2eb7ca5df9def36ae833ce6b4dc5cea672a198aeb0e4a3ea2fafeb90f1934

    • SSDEEP

      1536:Isz1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCow8hfC:hfAIuZAIuYSMjoqtMHfhfC

    Score
    9/10
    ransomwareupx

    • Renames multiple (3264) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks