Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

7

5b528e46ec...cs.exe

windows7-x64

9

5b528e46ec...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5b528e46ec751a4212cebe862ee77f10_NeikiAnalytics.exe

  • Size

    47KB

  • Sample

    240529-3xh5xsef6w

  • MD5

    5b528e46ec751a4212cebe862ee77f10

  • SHA1

    aa8a9a74a533a0eff0491ea47c1ae5512cc8d007

  • SHA256

    d39c179c215c72fbf0afab02461a35f85294a9101e5d686b7a84b99e16ea0414

  • SHA512

    f854578ccac0db00a089bb60206c438e192d40808a4980a3d2b7440744883f50603121fcc53154cb080287cd9c416ebc62faffc6e37c1365e64f67c54ab11918

  • SSDEEP

    768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFx7:CTWn1++PJHJXA/OsIZfzc3/Q8xJJMJJQ

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      5b528e46ec751a4212cebe862ee77f10_NeikiAnalytics.exe

    • Size

      47KB

    • MD5

      5b528e46ec751a4212cebe862ee77f10

    • SHA1

      aa8a9a74a533a0eff0491ea47c1ae5512cc8d007

    • SHA256

      d39c179c215c72fbf0afab02461a35f85294a9101e5d686b7a84b99e16ea0414

    • SHA512

      f854578ccac0db00a089bb60206c438e192d40808a4980a3d2b7440744883f50603121fcc53154cb080287cd9c416ebc62faffc6e37c1365e64f67c54ab11918

    • SSDEEP

      768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFx7:CTWn1++PJHJXA/OsIZfzc3/Q8xJJMJJQ

    Score
    9/10
    ransomwareupx

    • Renames multiple (3506) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks