Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

eaf200f10c...cs.exe

windows7-x64

9

eaf200f10c...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eaf200f10cf8aede175e0fe6e487e5c0_NeikiAnalytics.exe

  • Size

    97KB

  • Sample

    240517-ns1rvaga59

  • MD5

    eaf200f10cf8aede175e0fe6e487e5c0

  • SHA1

    b322926a0d9e7d8e279fb028a413e944830e69ac

  • SHA256

    b01d9d9815384e06618cbe1d079a3a09092afc4b84c4f5ccdb32de3b2fffb0fc

  • SHA512

    bed372fc527c2f29b6603052551e0a8dc7c4efaef23207da231c1b16f4aad039d48e100c61d9b94d1c1b55f4a597e3d98149806e301262fa547883019cd39453

  • SSDEEP

    3072:6rWpcOPxPke+e3fFpsJOfFpsJbgEbThyD:tFPxPke+eIZyD

Score
9/10
ransomware

Malware Config

Targets

    • Target

      eaf200f10cf8aede175e0fe6e487e5c0_NeikiAnalytics.exe

    • Size

      97KB

    • MD5

      eaf200f10cf8aede175e0fe6e487e5c0

    • SHA1

      b322926a0d9e7d8e279fb028a413e944830e69ac

    • SHA256

      b01d9d9815384e06618cbe1d079a3a09092afc4b84c4f5ccdb32de3b2fffb0fc

    • SHA512

      bed372fc527c2f29b6603052551e0a8dc7c4efaef23207da231c1b16f4aad039d48e100c61d9b94d1c1b55f4a597e3d98149806e301262fa547883019cd39453

    • SSDEEP

      3072:6rWpcOPxPke+e3fFpsJOfFpsJbgEbThyD:tFPxPke+eIZyD

    Score
    9/10
    ransomware

    • Renames multiple (531) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks