Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

7

85cc1368d4...cs.exe

windows7-x64

9

85cc1368d4...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    85cc1368d47d3ce40d24475979ed89a0_NeikiAnalytics

  • Size

    106KB

  • Sample

    240515-ftg25aah32

  • MD5

    85cc1368d47d3ce40d24475979ed89a0

  • SHA1

    647f3c7158ffaad95260ba6738a0b88dcb4d913a

  • SHA256

    2df135b55b592de9a3099de74c7b56a25c9c31b3037b2d1de563befddb4311c1

  • SHA512

    f4868091629fad6abbf82923e5f90c937bc528f2788fe3e4cc72b64a86b7376c61556bc1bea89282dd0695771372eb2f5dd2b1a0e4ddb125e8ed7d92aeec3f7e

  • SSDEEP

    1536:Isz1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCow8hff+Q:hfAIuZAIuYSMjoqtMHfhffPp5nh

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      85cc1368d47d3ce40d24475979ed89a0_NeikiAnalytics

    • Size

      106KB

    • MD5

      85cc1368d47d3ce40d24475979ed89a0

    • SHA1

      647f3c7158ffaad95260ba6738a0b88dcb4d913a

    • SHA256

      2df135b55b592de9a3099de74c7b56a25c9c31b3037b2d1de563befddb4311c1

    • SHA512

      f4868091629fad6abbf82923e5f90c937bc528f2788fe3e4cc72b64a86b7376c61556bc1bea89282dd0695771372eb2f5dd2b1a0e4ddb125e8ed7d92aeec3f7e

    • SSDEEP

      1536:Isz1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCow8hff+Q:hfAIuZAIuYSMjoqtMHfhffPp5nh

    Score
    9/10
    ransomwareupx

    • Renames multiple (3460) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks