Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

6b33af4d98...cs.exe

windows7-x64

9

6b33af4d98...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6b33af4d98d97f856ce120c2e0d798b0_NeikiAnalytics.exe

  • Size

    99KB

  • Sample

    240517-a1wafahd6t

  • MD5

    6b33af4d98d97f856ce120c2e0d798b0

  • SHA1

    f26485bea23bdf65bd3c7d05fdb5612420948371

  • SHA256

    e450a7e63d07a6cd03a5ba7c006f4b468318e6311185a2b4f1d421b830098fae

  • SHA512

    31aca25f4a004368aab4e0eed884bd9950b97af362d385f3f07f402c62d2e8396305d98edf3ce00129538b7dcdf5a4177ee2b95504da2c4a758344656a0be190

  • SSDEEP

    1536:W7ZrpApojOPG0PGQJwFJwkpe+eTDPfFpsJOfFpsJCAdCjHKPNzyOoyOllk:6rWpcOPxPke+e3fFpsJOfFpsJbgExEU

Score
9/10
ransomware

Malware Config

Targets

    • Target

      6b33af4d98d97f856ce120c2e0d798b0_NeikiAnalytics.exe

    • Size

      99KB

    • MD5

      6b33af4d98d97f856ce120c2e0d798b0

    • SHA1

      f26485bea23bdf65bd3c7d05fdb5612420948371

    • SHA256

      e450a7e63d07a6cd03a5ba7c006f4b468318e6311185a2b4f1d421b830098fae

    • SHA512

      31aca25f4a004368aab4e0eed884bd9950b97af362d385f3f07f402c62d2e8396305d98edf3ce00129538b7dcdf5a4177ee2b95504da2c4a758344656a0be190

    • SSDEEP

      1536:W7ZrpApojOPG0PGQJwFJwkpe+eTDPfFpsJOfFpsJCAdCjHKPNzyOoyOllk:6rWpcOPxPke+e3fFpsJOfFpsJbgExEU

    Score
    9/10
    ransomware

    • Renames multiple (3440) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks