Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

18fa959d8c...cs.exe

windows7-x64

9

18fa959d8c...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    18fa959d8c4d865adc563159d16f2e30_NeikiAnalytics.exe

  • Size

    46KB

  • Sample

    240610-rbyspsyfnj

  • MD5

    18fa959d8c4d865adc563159d16f2e30

  • SHA1

    867ebabf40ca90b4916978eed75c27b1325a7e58

  • SHA256

    cdf2c97ef808e346b097c7229024af8532fc26f4c0e3aae8aec00645eacc2fa7

  • SHA512

    d4bde6144fb638ef5d720a9ccf349272bff27352bac8bb7898474bad55c6ef377e5055b3553317b5266a8c9f0e8c18280fd219b7eed656dd8f6c7d7ce15e8122

  • SSDEEP

    384:GBt7Br5xjLMuLAgA71FbhvDl3DG71ul3DG71XUmUIYFt1zecDT1zecD4:W7BlpNLpARFbhblkYlkuvIYFWcDYcD4

Score
9/10
ransomware

Malware Config

Targets

    • Target

      18fa959d8c4d865adc563159d16f2e30_NeikiAnalytics.exe

    • Size

      46KB

    • MD5

      18fa959d8c4d865adc563159d16f2e30

    • SHA1

      867ebabf40ca90b4916978eed75c27b1325a7e58

    • SHA256

      cdf2c97ef808e346b097c7229024af8532fc26f4c0e3aae8aec00645eacc2fa7

    • SHA512

      d4bde6144fb638ef5d720a9ccf349272bff27352bac8bb7898474bad55c6ef377e5055b3553317b5266a8c9f0e8c18280fd219b7eed656dd8f6c7d7ce15e8122

    • SSDEEP

      384:GBt7Br5xjLMuLAgA71FbhvDl3DG71ul3DG71XUmUIYFt1zecDT1zecD4:W7BlpNLpARFbhblkYlkuvIYFWcDYcD4

    Score
    9/10
    ransomware

    • Renames multiple (3777) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks