Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

7

4cb5d7c860...cs.exe

windows7-x64

9

4cb5d7c860...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4cb5d7c860d6fcc780b29b6424f55880_NeikiAnalytics.exe

  • Size

    331KB

  • Sample

    240605-krm8ksca98

  • MD5

    4cb5d7c860d6fcc780b29b6424f55880

  • SHA1

    0601349b4060dea1c5a373b4718b3cbb5323fb17

  • SHA256

    7b21aede7f3d0d8a17d107fd4895f1fe7b02d465c3d55ecdaee5f769ca965e9e

  • SHA512

    96ff568f652d4c33ddcb66ec3b854083ca705520e30601d6ee91f5857e5f4d1994502ac68af8e091f3280e734e98cf30af21c52ef4accbf7b89973c7433b2d6f

  • SSDEEP

    6144:KQSo1EZGtKgZGtK/CAIuZAIudQSo1EZGtKgZGtK/CAIuZAIutGL:KQtyZGtKgZGtK/CAIuZAIudQtyZGtKg/

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      4cb5d7c860d6fcc780b29b6424f55880_NeikiAnalytics.exe

    • Size

      331KB

    • MD5

      4cb5d7c860d6fcc780b29b6424f55880

    • SHA1

      0601349b4060dea1c5a373b4718b3cbb5323fb17

    • SHA256

      7b21aede7f3d0d8a17d107fd4895f1fe7b02d465c3d55ecdaee5f769ca965e9e

    • SHA512

      96ff568f652d4c33ddcb66ec3b854083ca705520e30601d6ee91f5857e5f4d1994502ac68af8e091f3280e734e98cf30af21c52ef4accbf7b89973c7433b2d6f

    • SSDEEP

      6144:KQSo1EZGtKgZGtK/CAIuZAIudQSo1EZGtKgZGtK/CAIuZAIutGL:KQtyZGtKgZGtK/CAIuZAIudQtyZGtKg/

    Score
    9/10
    ransomwareupx

    • Renames multiple (127) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks