Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ff2d64aee6779693c599e7611dff0d50_NeikiAnalytics.exe

  • Size

    54KB

  • Sample

    240603-wveamaed81

  • MD5

    ff2d64aee6779693c599e7611dff0d50

  • SHA1

    34cba0f66a82ddcd3f7a0b7f27db18963e60a2a0

  • SHA256

    8b0b6f3d712b610f5fe820aca750560c01d0f64901c2e69d7ff5378e66f64b64

  • SHA512

    9d2ccac6bc660c470b141418ce052c8461b3ab3929aef24c6593768c90db4b4fee4b0e483be5d5845aabaa2829d68c8610eded5cc46c9d0dd7e0f9873ab753e8

  • SSDEEP

    1536:CTWn1++PJHJXA/OsIZfzc3/Q8asUsJOckSkcaa1aaK:KQSohsUsVaa1aaK

Score
9/10

Malware Config

Targets

    • Target

      ff2d64aee6779693c599e7611dff0d50_NeikiAnalytics.exe

    • Size

      54KB

    • MD5

      ff2d64aee6779693c599e7611dff0d50

    • SHA1

      34cba0f66a82ddcd3f7a0b7f27db18963e60a2a0

    • SHA256

      8b0b6f3d712b610f5fe820aca750560c01d0f64901c2e69d7ff5378e66f64b64

    • SHA512

      9d2ccac6bc660c470b141418ce052c8461b3ab3929aef24c6593768c90db4b4fee4b0e483be5d5845aabaa2829d68c8610eded5cc46c9d0dd7e0f9873ab753e8

    • SSDEEP

      1536:CTWn1++PJHJXA/OsIZfzc3/Q8asUsJOckSkcaa1aaK:KQSohsUsVaa1aaK

    Score
    9/10
    • Renames multiple (3720) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks