Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

0329c7f617...cs.exe

windows7-x64

9

0329c7f617...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0329c7f617015261f3b8fdd5c743e810_NeikiAnalytics.exe

  • Size

    37KB

  • Sample

    240606-lmt11ace5s

  • MD5

    0329c7f617015261f3b8fdd5c743e810

  • SHA1

    395ab8ed1d2385b771128834a2c09574b0be7d86

  • SHA256

    a159341fbf9cd09cee8daf0e5ccdc6e84bcde9e8375456b9dde90756011633a0

  • SHA512

    1a7e025af71213781c581ffa2e91ed5213244b5a63e1afc6d782f0c803607915cbfe20b60f47768f84bf38f1e8146b72ccf02fd2a84aeea6e81ce50507762b82

  • SSDEEP

    384:GBt7Br5xjL9AgA71FbhvuNBNQFMVywVyO:W7BlpppARFbhHF0yoyO

Score
9/10
ransomware

Malware Config

Targets

    • Target

      0329c7f617015261f3b8fdd5c743e810_NeikiAnalytics.exe

    • Size

      37KB

    • MD5

      0329c7f617015261f3b8fdd5c743e810

    • SHA1

      395ab8ed1d2385b771128834a2c09574b0be7d86

    • SHA256

      a159341fbf9cd09cee8daf0e5ccdc6e84bcde9e8375456b9dde90756011633a0

    • SHA512

      1a7e025af71213781c581ffa2e91ed5213244b5a63e1afc6d782f0c803607915cbfe20b60f47768f84bf38f1e8146b72ccf02fd2a84aeea6e81ce50507762b82

    • SSDEEP

      384:GBt7Br5xjL9AgA71FbhvuNBNQFMVywVyO:W7BlpppARFbhHF0yoyO

    Score
    9/10
    ransomware

    • Renames multiple (3786) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks