Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

628a29e9a7...cs.exe

windows7-x64

9

628a29e9a7...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    628a29e9a7ee5ff1278c197e993b4970_NeikiAnalytics

  • Size

    107KB

  • Sample

    240515-cn8q4sch48

  • MD5

    628a29e9a7ee5ff1278c197e993b4970

  • SHA1

    b4bcdb2404409b8a8d6013336815e660cbb394fd

  • SHA256

    139a207c8c89645b9e28326a29c333af3d488aada3ac682a37a72ce392923434

  • SHA512

    8fa519d2e88811b1ae604acd495ad598884584493b4b36a516815435bdf7b304614e93667ba33d966e40dfb32d025f7e2740d4bf9bf0d435cfed7f6fa213dbaa

  • SSDEEP

    768:W7BlpQpARFbh2UM/zX1vqX1vLFB5W5pYJIJDYJIJOO6O2lpHiJOP25LqrH5HiJOp:W7ZQpApjIWe+eoO6O2lpiMZiMDjwWV

Score
9/10
ransomware

Malware Config

Targets

    • Target

      628a29e9a7ee5ff1278c197e993b4970_NeikiAnalytics

    • Size

      107KB

    • MD5

      628a29e9a7ee5ff1278c197e993b4970

    • SHA1

      b4bcdb2404409b8a8d6013336815e660cbb394fd

    • SHA256

      139a207c8c89645b9e28326a29c333af3d488aada3ac682a37a72ce392923434

    • SHA512

      8fa519d2e88811b1ae604acd495ad598884584493b4b36a516815435bdf7b304614e93667ba33d966e40dfb32d025f7e2740d4bf9bf0d435cfed7f6fa213dbaa

    • SSDEEP

      768:W7BlpQpARFbh2UM/zX1vqX1vLFB5W5pYJIJDYJIJOO6O2lpHiJOP25LqrH5HiJOp:W7ZQpApjIWe+eoO6O2lpiMZiMDjwWV

    Score
    9/10
    ransomware

    • Renames multiple (3462) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks