Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

4c21a3ac00...cs.exe

windows7-x64

9

4c21a3ac00...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4c21a3ac00fb01bb3f51918a6996c750_NeikiAnalytics.exe

  • Size

    78KB

  • Sample

    240529-j1h5jsgg68

  • MD5

    4c21a3ac00fb01bb3f51918a6996c750

  • SHA1

    82d1afa3618395f2c5ef6757b2a63bf6516aa66a

  • SHA256

    cc6c8fec7a209f1288a94f1013742e089c4c3db5027a81d39f3b8ed2b0d33194

  • SHA512

    85884c66d1fdd6a80d0d096e87d6254b4f4bdf6075899e4c2f88abd80c25031c67ca76e98f7ad20ef1271f11f39040011ae295ce5761a424479399726f8d60b0

  • SSDEEP

    768:W7BlpDpARFbhYQkQjjLaMaRRpi1xnRpi1xOYJIJDYJIJMFhWFhCmDpBIjsZORReu:W7ZDpApYbWj2WTWJe+e/qXX

Score
9/10
ransomware

Malware Config

Targets

    • Target

      4c21a3ac00fb01bb3f51918a6996c750_NeikiAnalytics.exe

    • Size

      78KB

    • MD5

      4c21a3ac00fb01bb3f51918a6996c750

    • SHA1

      82d1afa3618395f2c5ef6757b2a63bf6516aa66a

    • SHA256

      cc6c8fec7a209f1288a94f1013742e089c4c3db5027a81d39f3b8ed2b0d33194

    • SHA512

      85884c66d1fdd6a80d0d096e87d6254b4f4bdf6075899e4c2f88abd80c25031c67ca76e98f7ad20ef1271f11f39040011ae295ce5761a424479399726f8d60b0

    • SSDEEP

      768:W7BlpDpARFbhYQkQjjLaMaRRpi1xnRpi1xOYJIJDYJIJMFhWFhCmDpBIjsZORReu:W7ZDpApYbWj2WTWJe+e/qXX

    Score
    9/10
    ransomware

    • Renames multiple (3464) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks