Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

b90fcd05f0...cs.exe

windows7-x64

9

b90fcd05f0...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b90fcd05f01a085361ab33854e763270_NeikiAnalytics

  • Size

    104KB

  • Sample

    240513-p8qr9agc97

  • MD5

    b90fcd05f01a085361ab33854e763270

  • SHA1

    be5bbd74329aa12b3dbdf41892e61bbd804c566e

  • SHA256

    abbce0b9b1f985f10b512e5aa04b4226dfa28a3512a228e6c7b1bda27d8f6a99

  • SHA512

    12b4a733ec36050c437088a48e66f9c39a009daed77db1465949d785503905e7dceff85da714fd0aa92b8aeac80cea3a8001141f4ef809aec3435fd8176846dc

  • SSDEEP

    768:W7BlpQpARFbh2UM/zX1vqX1vLFB5W5pYJIJDYJIJOO6O2lpHiJOP25LqrH5HiJOT:W7ZQpApjIWe+eoO6O2lpiMZiM1

Score
9/10
ransomware

Malware Config

Targets

    • Target

      b90fcd05f01a085361ab33854e763270_NeikiAnalytics

    • Size

      104KB

    • MD5

      b90fcd05f01a085361ab33854e763270

    • SHA1

      be5bbd74329aa12b3dbdf41892e61bbd804c566e

    • SHA256

      abbce0b9b1f985f10b512e5aa04b4226dfa28a3512a228e6c7b1bda27d8f6a99

    • SHA512

      12b4a733ec36050c437088a48e66f9c39a009daed77db1465949d785503905e7dceff85da714fd0aa92b8aeac80cea3a8001141f4ef809aec3435fd8176846dc

    • SSDEEP

      768:W7BlpQpARFbh2UM/zX1vqX1vLFB5W5pYJIJDYJIJOO6O2lpHiJOP25LqrH5HiJOT:W7ZQpApjIWe+eoO6O2lpiMZiM1

    Score
    9/10
    ransomware

    • Renames multiple (3488) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks