Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

1b0b95804c...cs.exe

windows7-x64

9

1b0b95804c...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1b0b95804cfb88e12cab56891a36f890_NeikiAnalytics

  • Size

    76KB

  • Sample

    240513-zzghbsdg8x

  • MD5

    1b0b95804cfb88e12cab56891a36f890

  • SHA1

    eefb8a72bf06211ac1728c1a3ef01d8e87652935

  • SHA256

    d4f969e3288206d1535d4038b429822873eaf18865c7a2ff31c5b17dd05254dc

  • SHA512

    6668f89e6f61e6f8f5cec07ea06e372c9e170e590a728eba932a25c08d5b84cc1d2849d0cf5db47cbf683cfcfa47fcefa22d093a9b9d997b33e94d3873df99b2

  • SSDEEP

    1536:W7ZhA7pApH1d9oVLQthbqbY9oVLQthbq51Rn6wt7t2rt303aq5qE:6e7WpP9oVLQthbYY9oVLQthbUrt7t2rU

Score
9/10
ransomware

Malware Config

Targets

    • Target

      1b0b95804cfb88e12cab56891a36f890_NeikiAnalytics

    • Size

      76KB

    • MD5

      1b0b95804cfb88e12cab56891a36f890

    • SHA1

      eefb8a72bf06211ac1728c1a3ef01d8e87652935

    • SHA256

      d4f969e3288206d1535d4038b429822873eaf18865c7a2ff31c5b17dd05254dc

    • SHA512

      6668f89e6f61e6f8f5cec07ea06e372c9e170e590a728eba932a25c08d5b84cc1d2849d0cf5db47cbf683cfcfa47fcefa22d093a9b9d997b33e94d3873df99b2

    • SSDEEP

      1536:W7ZhA7pApH1d9oVLQthbqbY9oVLQthbq51Rn6wt7t2rt303aq5qE:6e7WpP9oVLQthbYY9oVLQthbUrt7t2rU

    Score
    9/10
    ransomware

    • Renames multiple (3482) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks