Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

f238ef9dcb...cs.exe

windows7-x64

9

f238ef9dcb...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f238ef9dcb7ec0625232dd48f184a690_NeikiAnalytics.exe

  • Size

    70KB

  • Sample

    240526-kx9zjadg96

  • MD5

    f238ef9dcb7ec0625232dd48f184a690

  • SHA1

    8e93804328aa0e1a553c8855d6ffa7bd6f470615

  • SHA256

    42674a9f02953727a996cf05101d0353e137927996ea8ce7e2d1eae2eb76172e

  • SHA512

    dd3533db153208d8f095208960515077b8b3208442c0c776668727518e9805f1c4410388c623c08ed775ccccb53820ed67b2aaacac9fe018e8bc2e866caedeec

  • SSDEEP

    1536:W7Z9pApQESOHepOHe8G+6E6DGsTdc6e6kvNDck7Tdc6e6kvNDckkvVv/Ui:69WpQEoTdc6e6kvNDck7Tdc6e6kvNDcl

Score
9/10
ransomware

Malware Config

Targets

    • Target

      f238ef9dcb7ec0625232dd48f184a690_NeikiAnalytics.exe

    • Size

      70KB

    • MD5

      f238ef9dcb7ec0625232dd48f184a690

    • SHA1

      8e93804328aa0e1a553c8855d6ffa7bd6f470615

    • SHA256

      42674a9f02953727a996cf05101d0353e137927996ea8ce7e2d1eae2eb76172e

    • SHA512

      dd3533db153208d8f095208960515077b8b3208442c0c776668727518e9805f1c4410388c623c08ed775ccccb53820ed67b2aaacac9fe018e8bc2e866caedeec

    • SSDEEP

      1536:W7Z9pApQESOHepOHe8G+6E6DGsTdc6e6kvNDck7Tdc6e6kvNDckkvVv/Ui:69WpQEoTdc6e6kvNDck7Tdc6e6kvNDcl

    Score
    9/10
    ransomware

    • Renames multiple (3436) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks