Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

7

1268c3acb8...cs.exe

windows7-x64

9

1268c3acb8...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1268c3acb8bf6926432c114361fd0a20_NeikiAnalytics.exe

  • Size

    179KB

  • Sample

    240606-tzhshahf42

  • MD5

    1268c3acb8bf6926432c114361fd0a20

  • SHA1

    62a43ece578901d1957802bfe15341378ce8a0c5

  • SHA256

    17fd2adb429decdc674b110f862e44bee149cb85c721b4f8c57e822958932a1f

  • SHA512

    65e49484e908e8f753af253b038645603e00829ad39c40002c8624205e481f12d9d63e39d8d7a0b8fa23bba6b8c66b1bd89763d13220e09ccd1df1091b273a17

  • SSDEEP

    3072:fnyiQSo1EZGtKgZGtK/PgtU1wAIuZAIuz:KiQSo1EZGtKgZGtK/CAIuZAIuz

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      1268c3acb8bf6926432c114361fd0a20_NeikiAnalytics.exe

    • Size

      179KB

    • MD5

      1268c3acb8bf6926432c114361fd0a20

    • SHA1

      62a43ece578901d1957802bfe15341378ce8a0c5

    • SHA256

      17fd2adb429decdc674b110f862e44bee149cb85c721b4f8c57e822958932a1f

    • SHA512

      65e49484e908e8f753af253b038645603e00829ad39c40002c8624205e481f12d9d63e39d8d7a0b8fa23bba6b8c66b1bd89763d13220e09ccd1df1091b273a17

    • SSDEEP

      3072:fnyiQSo1EZGtKgZGtK/PgtU1wAIuZAIuz:KiQSo1EZGtKgZGtK/CAIuZAIuz

    Score
    9/10
    ransomwareupx

    • Renames multiple (3257) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks