Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

4b6c7dd19f...cs.exe

windows7-x64

9

4b6c7dd19f...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4b6c7dd19f6f630166f16d05b86cc0e0_NeikiAnalytics

  • Size

    129KB

  • Sample

    240515-agq7dafh67

  • MD5

    4b6c7dd19f6f630166f16d05b86cc0e0

  • SHA1

    216edddc0ec08c6854458a348a3e8e8200b1db40

  • SHA256

    a6ee812e21387830b5cb0c112a3a217339295a8c1238c307db29f2db69616a8c

  • SHA512

    ef1d4283acb7b8eff67f88ad9da7226e5ebde3c70d6c2aeadf9f679f308456e87b29bb7e5e55f66d7a29186a447589db1e8ffa76b29cb9164bd4f1b03e0ea037

  • SSDEEP

    768:/7BlpQpARFbh2UM/zX1vqX1v+1WbW1rjrA9ZONZOD5ZTXB85c50KPK9:/7ZQpApUsKiX26Ka4

Score
9/10
ransomware

Malware Config

Targets

    • Target

      4b6c7dd19f6f630166f16d05b86cc0e0_NeikiAnalytics

    • Size

      129KB

    • MD5

      4b6c7dd19f6f630166f16d05b86cc0e0

    • SHA1

      216edddc0ec08c6854458a348a3e8e8200b1db40

    • SHA256

      a6ee812e21387830b5cb0c112a3a217339295a8c1238c307db29f2db69616a8c

    • SHA512

      ef1d4283acb7b8eff67f88ad9da7226e5ebde3c70d6c2aeadf9f679f308456e87b29bb7e5e55f66d7a29186a447589db1e8ffa76b29cb9164bd4f1b03e0ea037

    • SSDEEP

      768:/7BlpQpARFbh2UM/zX1vqX1v+1WbW1rjrA9ZONZOD5ZTXB85c50KPK9:/7ZQpApUsKiX26Ka4

    Score
    9/10
    ransomware

    • Renames multiple (3438) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks