Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

0ede7d1549...cs.exe

windows7-x64

9

0ede7d1549...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0ede7d1549f5dd8efb6b7ff47ae57a50_NeikiAnalytics.exe

  • Size

    48KB

  • Sample

    240604-2ez52sed65

  • MD5

    0ede7d1549f5dd8efb6b7ff47ae57a50

  • SHA1

    2776d955ac8c3ae8767750eb8384ab1cfc99f1e0

  • SHA256

    dc7f3219a20d5742e807f8d6e521e51a6e77e4f152cdeca1f187d8ceb5cb510f

  • SHA512

    b34c4202943e48d4cd0b1c24dec86fc930645defa3e21485df24d1ffccf9d6de5f7ae79fcb8ded28161beec39d030e84d794fa85e9bc3f3f3b46e16e3e1091ef

  • SSDEEP

    768:/7BlpQpARFbhIYJIJDYJIJPfFpsJcFfFpsJcVM3VM3W:/7ZQpApze+eJfFpsJOfFpsJZ

Score
9/10
ransomware

Malware Config

Targets

    • Target

      0ede7d1549f5dd8efb6b7ff47ae57a50_NeikiAnalytics.exe

    • Size

      48KB

    • MD5

      0ede7d1549f5dd8efb6b7ff47ae57a50

    • SHA1

      2776d955ac8c3ae8767750eb8384ab1cfc99f1e0

    • SHA256

      dc7f3219a20d5742e807f8d6e521e51a6e77e4f152cdeca1f187d8ceb5cb510f

    • SHA512

      b34c4202943e48d4cd0b1c24dec86fc930645defa3e21485df24d1ffccf9d6de5f7ae79fcb8ded28161beec39d030e84d794fa85e9bc3f3f3b46e16e3e1091ef

    • SSDEEP

      768:/7BlpQpARFbhIYJIJDYJIJPfFpsJcFfFpsJcVM3VM3W:/7ZQpApze+eJfFpsJOfFpsJZ

    Score
    9/10
    ransomware

    • Renames multiple (3500) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks