Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

7

2508cdafe1...cs.exe

windows7-x64

9

2508cdafe1...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2508cdafe17535d5a7d8bca1d1eefdd0_NeikiAnalytics.exe

  • Size

    240KB

  • Sample

    240604-djeg5sba5w

  • MD5

    2508cdafe17535d5a7d8bca1d1eefdd0

  • SHA1

    67ea2b730e2133119a9d1f54c94dcbec3fd20e2a

  • SHA256

    bc705525039579bb1bef77207c4e1578718a94014d5c36bea8a46170b3c5fd2d

  • SHA512

    92988900906e87c36d529141b1d2a1711c1fa382432e90d3f793d1815f9e7df0a3ff4e47226ef3e01593138c0f64cd1f4dd4fa5999ed9b9a746a3acdab00c2d1

  • SSDEEP

    3072:fnymCAIuZAIuYSMjoqtMHfhfAfAIuZAIuYSMjoqtMHfhfm:KmCAIuZAIuDMVtM/GfAIuZAIuDMVtM/w

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      2508cdafe17535d5a7d8bca1d1eefdd0_NeikiAnalytics.exe

    • Size

      240KB

    • MD5

      2508cdafe17535d5a7d8bca1d1eefdd0

    • SHA1

      67ea2b730e2133119a9d1f54c94dcbec3fd20e2a

    • SHA256

      bc705525039579bb1bef77207c4e1578718a94014d5c36bea8a46170b3c5fd2d

    • SHA512

      92988900906e87c36d529141b1d2a1711c1fa382432e90d3f793d1815f9e7df0a3ff4e47226ef3e01593138c0f64cd1f4dd4fa5999ed9b9a746a3acdab00c2d1

    • SSDEEP

      3072:fnymCAIuZAIuYSMjoqtMHfhfAfAIuZAIuYSMjoqtMHfhfm:KmCAIuZAIuDMVtM/GfAIuZAIuDMVtM/w

    Score
    9/10
    ransomwareupx

    • Renames multiple (2850) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks