Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

5cdebc6c94...cs.exe

windows7-x64

7

5cdebc6c94...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5cdebc6c94f1f55a77d4e65683d9ee20_NeikiAnalytics.exe

  • Size

    393KB

  • Sample

    240526-wzlv9sfc4s

  • MD5

    5cdebc6c94f1f55a77d4e65683d9ee20

  • SHA1

    695e8844a9eb471aae1a860eebfd54ca2da6b2ee

  • SHA256

    9a99471f898c034091d309f00504bd5b2030a1503e31ec4978275f940d34b53e

  • SHA512

    8a0ec16ca563e4b069f329db00b22f9440b760602b9d72cace6c65c3d40d498dc27f4820e021378336f9ce662a3d8622544e0aa5b149fabbb183cf7ee584b89c

  • SSDEEP

    6144:RqKvb0CYJ973e+eKZ0VBFTlAOB6pcq+HpFeHPgsHsSYafq8g2Og:vvbxYX7Z0VdAzpcqapMvgzS/Jl

Score
9/10
ransomware

Malware Config

Targets

    • Target

      5cdebc6c94f1f55a77d4e65683d9ee20_NeikiAnalytics.exe

    • Size

      393KB

    • MD5

      5cdebc6c94f1f55a77d4e65683d9ee20

    • SHA1

      695e8844a9eb471aae1a860eebfd54ca2da6b2ee

    • SHA256

      9a99471f898c034091d309f00504bd5b2030a1503e31ec4978275f940d34b53e

    • SHA512

      8a0ec16ca563e4b069f329db00b22f9440b760602b9d72cace6c65c3d40d498dc27f4820e021378336f9ce662a3d8622544e0aa5b149fabbb183cf7ee584b89c

    • SSDEEP

      6144:RqKvb0CYJ973e+eKZ0VBFTlAOB6pcq+HpFeHPgsHsSYafq8g2Og:vvbxYX7Z0VdAzpcqapMvgzS/Jl

    Score
    9/10
    ransomware

    • Renames multiple (5112) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks