Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

17a0ae72c1...cs.exe

windows7-x64

9

17a0ae72c1...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    17a0ae72c11b4e4e1677b6a5030d7590_NeikiAnalytics.exe

  • Size

    81KB

  • Sample

    240527-y5b95aaa65

  • MD5

    17a0ae72c11b4e4e1677b6a5030d7590

  • SHA1

    68e09c77776d5dcf0e464d10f473d4d583a1e2e2

  • SHA256

    2d863ecb990f695a3ab377418a676a23872e1274c2e11e0eb64f0686ce2d5a18

  • SHA512

    4dc1c584b7d226a4168871ddbc21cf5400df0e88be5cc8873ee4c4ce2c11968e8833b2024d740b5f9d9e5fc78e2fd24bdf8caaff40c9a9e0fa6dacce31de1dd4

  • SSDEEP

    1536:W7ZDpApYbWjIlE77ufL2e+e16al4StuStz:6DWpwE7oL2e+e/l4+u+z

Score
9/10
ransomware

Malware Config

Targets

    • Target

      17a0ae72c11b4e4e1677b6a5030d7590_NeikiAnalytics.exe

    • Size

      81KB

    • MD5

      17a0ae72c11b4e4e1677b6a5030d7590

    • SHA1

      68e09c77776d5dcf0e464d10f473d4d583a1e2e2

    • SHA256

      2d863ecb990f695a3ab377418a676a23872e1274c2e11e0eb64f0686ce2d5a18

    • SHA512

      4dc1c584b7d226a4168871ddbc21cf5400df0e88be5cc8873ee4c4ce2c11968e8833b2024d740b5f9d9e5fc78e2fd24bdf8caaff40c9a9e0fa6dacce31de1dd4

    • SSDEEP

      1536:W7ZDpApYbWjIlE77ufL2e+e16al4StuStz:6DWpwE7oL2e+e/l4+u+z

    Score
    9/10
    ransomware

    • Renames multiple (3452) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks