Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

7

1c36e727c2...cs.exe

windows7-x64

9

1c36e727c2...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1c36e727c25395afe3a5a2d7d1f6ab30_NeikiAnalytics.exe

  • Size

    74KB

  • Sample

    240529-aeeessaa7t

  • MD5

    1c36e727c25395afe3a5a2d7d1f6ab30

  • SHA1

    cf89bea4a123fbc0920373d37d22cf914c6c8788

  • SHA256

    6c525e4595f6fdd1152b497a2fbd4948bcfea5f4743b80f20a546c5376bc69d8

  • SHA512

    eb27002bc257fd3afe04e0077a28bec8a3b99ae2277c18c5e7a3b892814db8004be85b084aa40e70a68ea0becdd841ea63a385d68dd8fc1b8b3ef27f1aaa0227

  • SSDEEP

    1536:67Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8asUsWfnf0fB:+nyiQSohsUsWfnf0fB

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      1c36e727c25395afe3a5a2d7d1f6ab30_NeikiAnalytics.exe

    • Size

      74KB

    • MD5

      1c36e727c25395afe3a5a2d7d1f6ab30

    • SHA1

      cf89bea4a123fbc0920373d37d22cf914c6c8788

    • SHA256

      6c525e4595f6fdd1152b497a2fbd4948bcfea5f4743b80f20a546c5376bc69d8

    • SHA512

      eb27002bc257fd3afe04e0077a28bec8a3b99ae2277c18c5e7a3b892814db8004be85b084aa40e70a68ea0becdd841ea63a385d68dd8fc1b8b3ef27f1aaa0227

    • SSDEEP

      1536:67Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8asUsWfnf0fB:+nyiQSohsUsWfnf0fB

    Score
    9/10
    ransomwareupx

    • Renames multiple (3474) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks