Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

7

da6c46bc91...cs.exe

windows7-x64

9

da6c46bc91...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    da6c46bc9113d30aba9983fc8ebf0040_NeikiAnalytics

  • Size

    243KB

  • Sample

    240516-md5ltafh7x

  • MD5

    da6c46bc9113d30aba9983fc8ebf0040

  • SHA1

    6fb20dd03ed056ecca0dfb1a6ff41c9854748886

  • SHA256

    c205fbe36569c8431fc84fb8711ac0e67117077cd81fa38abd4f3a704ce87f21

  • SHA512

    300542da5f24907294b9f47710c710cb86aae3065fac3176f3846285c695352c836cfd454e1d77c426a60147828039f5cf09c02ed76e7f8870916e27cd089ae0

  • SSDEEP

    6144:JmCAIuZAIuDMVtM/amCAIuZAIuDMVtM/i:7AIuZAIuORAIuZAIuOF

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      da6c46bc9113d30aba9983fc8ebf0040_NeikiAnalytics

    • Size

      243KB

    • MD5

      da6c46bc9113d30aba9983fc8ebf0040

    • SHA1

      6fb20dd03ed056ecca0dfb1a6ff41c9854748886

    • SHA256

      c205fbe36569c8431fc84fb8711ac0e67117077cd81fa38abd4f3a704ce87f21

    • SHA512

      300542da5f24907294b9f47710c710cb86aae3065fac3176f3846285c695352c836cfd454e1d77c426a60147828039f5cf09c02ed76e7f8870916e27cd089ae0

    • SSDEEP

      6144:JmCAIuZAIuDMVtM/amCAIuZAIuDMVtM/i:7AIuZAIuORAIuZAIuOF

    Score
    9/10
    ransomwareupx

    • Renames multiple (3725) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks