Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
738a26e2132dde35dac548f48d35c280_NeikiAnalytics.exe
-
Size
131KB
-
Sample
240607-2jt5laee59
-
MD5
738a26e2132dde35dac548f48d35c280
-
SHA1
0e1c56c971e05c0f6c41da3cf80d19e2968176b2
-
SHA256
4e7d7aadfdec06b704810a6038d5e97f09c19fe29b83a07fcc8120ccd6c52365
-
SHA512
0150bf307a188866169a6f3b477e820032ae3116f39048aba0399ef604a66bff4656e918dc34b94796c8dc87ca13ba050c5af064db9488ad7a7b6c3d102817ab
-
SSDEEP
3072:fnyiQSot+opbmMS7BSFHQi8bLRCw/UnEllk+kffteA00afFk/cs2/n+Zlomxgr4/:KiQSofp+u
Behavioral task
behavioral1
Sample
738a26e2132dde35dac548f48d35c280_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
738a26e2132dde35dac548f48d35c280_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
738a26e2132dde35dac548f48d35c280_NeikiAnalytics.exe
-
Size
131KB
-
MD5
738a26e2132dde35dac548f48d35c280
-
SHA1
0e1c56c971e05c0f6c41da3cf80d19e2968176b2
-
SHA256
4e7d7aadfdec06b704810a6038d5e97f09c19fe29b83a07fcc8120ccd6c52365
-
SHA512
0150bf307a188866169a6f3b477e820032ae3116f39048aba0399ef604a66bff4656e918dc34b94796c8dc87ca13ba050c5af064db9488ad7a7b6c3d102817ab
-
SSDEEP
3072:fnyiQSot+opbmMS7BSFHQi8bLRCw/UnEllk+kffteA00afFk/cs2/n+Zlomxgr4/:KiQSofp+u
Score9/10-
Renames multiple (690) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-