Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

7

84334597f7...cs.exe

windows7-x64

9

84334597f7...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    84334597f7875ef7391eb3e74aa52ad0_NeikiAnalytics.exe

  • Size

    43KB

  • Sample

    240530-stzy6ach5s

  • MD5

    84334597f7875ef7391eb3e74aa52ad0

  • SHA1

    47ecc7bd306305abf9c46381c924a3f94b3e9367

  • SHA256

    8b6369e5e2cd6e56846c2e2166f79352c8451c48f34752140c9d44f628c57077

  • SHA512

    063187c77b14e0306bb378b8911504dc70cd4a7cacfd0c24470dc489abe6637eb2cd611c22bfa29401f7a4b107af3379c1a0adb3d48ae7e32df3025ea13278f4

  • SSDEEP

    768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFQ4:CTWn1++PJHJXA/OsIZfzc3/Q8Q8/8v16

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      84334597f7875ef7391eb3e74aa52ad0_NeikiAnalytics.exe

    • Size

      43KB

    • MD5

      84334597f7875ef7391eb3e74aa52ad0

    • SHA1

      47ecc7bd306305abf9c46381c924a3f94b3e9367

    • SHA256

      8b6369e5e2cd6e56846c2e2166f79352c8451c48f34752140c9d44f628c57077

    • SHA512

      063187c77b14e0306bb378b8911504dc70cd4a7cacfd0c24470dc489abe6637eb2cd611c22bfa29401f7a4b107af3379c1a0adb3d48ae7e32df3025ea13278f4

    • SSDEEP

      768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFQ4:CTWn1++PJHJXA/OsIZfzc3/Q8Q8/8v16

    Score
    9/10
    ransomwareupx

    • Renames multiple (3743) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks