Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

7

ef80f5ee00...cs.exe

windows7-x64

9

ef80f5ee00...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ef80f5ee00761e8c506b2976ac6b1760_NeikiAnalytics.exe

  • Size

    106KB

  • Sample

    240517-trsyhafh93

  • MD5

    ef80f5ee00761e8c506b2976ac6b1760

  • SHA1

    51c2b3beb02ed7464e354f15e5498186809811ee

  • SHA256

    8e4eb4737b287618843f465d0b02a9a3242b24f9e47ee27732c42f822c3f47b6

  • SHA512

    0c4a75621b5d5abf73485acf84fdd4c3b3e2c069391e1b838d2f44e66bd9ac72e42a652b4460dcaa35e932d82c9a6710ef32cf6cfca889fa9ab6f3fa7ebeb0eb

  • SSDEEP

    1536:Isz1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCow8hfRba:hfAIuZAIuYSMjoqtMHfhf0mQmo

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      ef80f5ee00761e8c506b2976ac6b1760_NeikiAnalytics.exe

    • Size

      106KB

    • MD5

      ef80f5ee00761e8c506b2976ac6b1760

    • SHA1

      51c2b3beb02ed7464e354f15e5498186809811ee

    • SHA256

      8e4eb4737b287618843f465d0b02a9a3242b24f9e47ee27732c42f822c3f47b6

    • SHA512

      0c4a75621b5d5abf73485acf84fdd4c3b3e2c069391e1b838d2f44e66bd9ac72e42a652b4460dcaa35e932d82c9a6710ef32cf6cfca889fa9ab6f3fa7ebeb0eb

    • SSDEEP

      1536:Isz1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCow8hfRba:hfAIuZAIuYSMjoqtMHfhf0mQmo

    Score
    9/10
    ransomwareupx

    • Renames multiple (3428) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks