Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    212e84bd7ce6f9d4418bc6d1cc98aa30_NeikiAnalytics.exe

  • Size

    52KB

  • Sample

    240527-gg7yfsba37

  • MD5

    212e84bd7ce6f9d4418bc6d1cc98aa30

  • SHA1

    f50142d9bed4cfacf275cac8412802cc806f2e1c

  • SHA256

    d9213386a39881dbb0ea1948759025288361bbd94a54904a5d44d16583265331

  • SHA512

    d1e70dae33305506f76a2cfdc4c0971422e8e13e42d0f8572195a4bfe237a3b652087ef19aa42dd228597ee70d3ab99dcf56674870eb83a49bdb9f7e6034ab2f

  • SSDEEP

    768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFFw:CTWn1++PJHJXA/OsIZfzc3/Q8yiM

Score
9/10

Malware Config

Targets

    • Target

      212e84bd7ce6f9d4418bc6d1cc98aa30_NeikiAnalytics.exe

    • Size

      52KB

    • MD5

      212e84bd7ce6f9d4418bc6d1cc98aa30

    • SHA1

      f50142d9bed4cfacf275cac8412802cc806f2e1c

    • SHA256

      d9213386a39881dbb0ea1948759025288361bbd94a54904a5d44d16583265331

    • SHA512

      d1e70dae33305506f76a2cfdc4c0971422e8e13e42d0f8572195a4bfe237a3b652087ef19aa42dd228597ee70d3ab99dcf56674870eb83a49bdb9f7e6034ab2f

    • SSDEEP

      768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFFw:CTWn1++PJHJXA/OsIZfzc3/Q8yiM

    Score
    9/10
    • Renames multiple (3552) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks