Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

7

55b902397c...cs.exe

windows7-x64

9

55b902397c...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    55b902397ca78a49c09c1e62bdbf68f0_NeikiAnalytics

  • Size

    138KB

  • Sample

    240515-3k9gcahh6v

  • MD5

    55b902397ca78a49c09c1e62bdbf68f0

  • SHA1

    12688dc6ce9d0dc01bf4fdc81810d8d0b4980ea9

  • SHA256

    4dfc11915fc8aa1d31d6132803fed0c69d6b51d44c0de5aa1fd840ddd009aa07

  • SHA512

    db954210787726b8dd2cd71b47df08b1a4cfb4efa663550686d79db78734df8a8aa5739c7a98fbec295a35e9832797defe9a8761518b9f04444f9a5a11318010

  • SSDEEP

    1536:67Zf/FAlsM1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCC:+nymCAIuZAIuYSMjoqtMHfhffPn

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      55b902397ca78a49c09c1e62bdbf68f0_NeikiAnalytics

    • Size

      138KB

    • MD5

      55b902397ca78a49c09c1e62bdbf68f0

    • SHA1

      12688dc6ce9d0dc01bf4fdc81810d8d0b4980ea9

    • SHA256

      4dfc11915fc8aa1d31d6132803fed0c69d6b51d44c0de5aa1fd840ddd009aa07

    • SHA512

      db954210787726b8dd2cd71b47df08b1a4cfb4efa663550686d79db78734df8a8aa5739c7a98fbec295a35e9832797defe9a8761518b9f04444f9a5a11318010

    • SSDEEP

      1536:67Zf/FAlsM1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCC:+nymCAIuZAIuYSMjoqtMHfhffPn

    Score
    9/10
    ransomwareupx

    • Renames multiple (519) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks