Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

00f349e859...cs.exe

windows7-x64

9

00f349e859...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    00f349e85993d46ce3ea92f48476d3b0_NeikiAnalytics.exe

  • Size

    186KB

  • Sample

    240601-12m9bsgc7z

  • MD5

    00f349e85993d46ce3ea92f48476d3b0

  • SHA1

    7235e382905a9df1aa18ebd754655942a36f1650

  • SHA256

    d51475eb97ae8d79e91778ac0864771b26a174e7be844cebcb220ccb44a9b333

  • SHA512

    470bbb65262cf7d7e0d5b1909e8e3d2718f779a59fb90b121983c81613e2454c0eb833c85495f0e98401ff01c25984a16423ba2b66f53bb0945c27c4fc45ccd2

  • SSDEEP

    3072:6e7WpMaxeb0CYJ97lEYNR73e+eKZWaa1aate7WpMaxeb0CYJ97lEYNR73e+eKZWE:RqKvb0CYJ973e+eKZWaa1aaIqKvb0CYV

Score
9/10
ransomware

Malware Config

Targets

    • Target

      00f349e85993d46ce3ea92f48476d3b0_NeikiAnalytics.exe

    • Size

      186KB

    • MD5

      00f349e85993d46ce3ea92f48476d3b0

    • SHA1

      7235e382905a9df1aa18ebd754655942a36f1650

    • SHA256

      d51475eb97ae8d79e91778ac0864771b26a174e7be844cebcb220ccb44a9b333

    • SHA512

      470bbb65262cf7d7e0d5b1909e8e3d2718f779a59fb90b121983c81613e2454c0eb833c85495f0e98401ff01c25984a16423ba2b66f53bb0945c27c4fc45ccd2

    • SSDEEP

      3072:6e7WpMaxeb0CYJ97lEYNR73e+eKZWaa1aate7WpMaxeb0CYJ97lEYNR73e+eKZWE:RqKvb0CYJ973e+eKZWaa1aaIqKvb0CYV

    Score
    9/10
    ransomware

    • Renames multiple (3526) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks