Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

15a7968140...cs.exe

windows7-x64

9

15a7968140...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    15a79681408c71d6aa288843d638d800_NeikiAnalytics.exe

  • Size

    129KB

  • Sample

    240526-vflkqaeb22

  • MD5

    15a79681408c71d6aa288843d638d800

  • SHA1

    cb5799db56f1e0d19e383512677463566526bc3a

  • SHA256

    993fafd8e389e3e5f7a379b3ddd0acd5da8ed08ef01ee4da5678aebc5684d595

  • SHA512

    577f08e500b539887c88b4a70fdb0775ef9df7f445a4ffeeeeedd57e04d8a7ff9ce70baeccde2512986aad9d009498121f722e4d5bd06a7a56fa2280d57f75c3

  • SSDEEP

    3072:6e7WpHIyRF9ESWu0SWuDmhSauvEKxVTLJtxoVz8FUDrYYaCusjdEKxVTLJtxoVzu:RqlIyFESWu0SWuGSwxB

Score
9/10
ransomware

Malware Config

Targets

    • Target

      15a79681408c71d6aa288843d638d800_NeikiAnalytics.exe

    • Size

      129KB

    • MD5

      15a79681408c71d6aa288843d638d800

    • SHA1

      cb5799db56f1e0d19e383512677463566526bc3a

    • SHA256

      993fafd8e389e3e5f7a379b3ddd0acd5da8ed08ef01ee4da5678aebc5684d595

    • SHA512

      577f08e500b539887c88b4a70fdb0775ef9df7f445a4ffeeeeedd57e04d8a7ff9ce70baeccde2512986aad9d009498121f722e4d5bd06a7a56fa2280d57f75c3

    • SSDEEP

      3072:6e7WpHIyRF9ESWu0SWuDmhSauvEKxVTLJtxoVz8FUDrYYaCusjdEKxVTLJtxoVzu:RqlIyFESWu0SWuGSwxB

    Score
    9/10
    ransomware

    • Renames multiple (3430) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks