Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

7

4270cee01b...cs.exe

windows7-x64

9

4270cee01b...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4270cee01b5624d674925825d4e7c4a0_NeikiAnalytics.exe

  • Size

    72KB

  • Sample

    240528-nzh6daac2w

  • MD5

    4270cee01b5624d674925825d4e7c4a0

  • SHA1

    51b553cc93a01356acdd9da18ebf679a2409e3ff

  • SHA256

    17937c3c94dd8f462d9916c566a02b2b8158d30fb7af0e1fa8121231f7f2de15

  • SHA512

    41e531131cd965207b78022cebb1bba1e1f3d56c9a2dc89bb7fb8075a79d377b646baa8711c40c8aa536625ab819932fbdb0300ccb8519e52786864f71e30704

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/QbUkNdNm:fnyiQSobUkzM

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      4270cee01b5624d674925825d4e7c4a0_NeikiAnalytics.exe

    • Size

      72KB

    • MD5

      4270cee01b5624d674925825d4e7c4a0

    • SHA1

      51b553cc93a01356acdd9da18ebf679a2409e3ff

    • SHA256

      17937c3c94dd8f462d9916c566a02b2b8158d30fb7af0e1fa8121231f7f2de15

    • SHA512

      41e531131cd965207b78022cebb1bba1e1f3d56c9a2dc89bb7fb8075a79d377b646baa8711c40c8aa536625ab819932fbdb0300ccb8519e52786864f71e30704

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/QbUkNdNm:fnyiQSobUkzM

    Score
    9/10
    ransomwareupx

    • Renames multiple (3213) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks