Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

cd41996d8f...cs.exe

windows7-x64

9

cd41996d8f...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cd41996d8fc4763384c08ea5acf3e260_NeikiAnalytics.exe

  • Size

    80KB

  • Sample

    240616-cwtbdszcjj

  • MD5

    cd41996d8fc4763384c08ea5acf3e260

  • SHA1

    03e70d72bb8a9f2523c1a8976c33e03500d84c1f

  • SHA256

    d319534f97396915e13c9944e71dd422265c4f2c7c53277e3a73640d96e789e0

  • SHA512

    90d1876788260dfb8561ccd4b05d789385497f26dcd34839728a31493737430e1c61478497b67f0679c9df38fcc9f82a552418ce3c8ac8c1b399ef7e05232d08

  • SSDEEP

    1536:W7ZhA7pApMaxB4b0CYJ97lEVqNR7Yge+eJG/x/HfFpsJOfFpsJ8:6e7WpMaxeb0CYJ97lEYNR73e+eKZHfFl

Score
9/10
ransomware

Malware Config

Targets

    • Target

      cd41996d8fc4763384c08ea5acf3e260_NeikiAnalytics.exe

    • Size

      80KB

    • MD5

      cd41996d8fc4763384c08ea5acf3e260

    • SHA1

      03e70d72bb8a9f2523c1a8976c33e03500d84c1f

    • SHA256

      d319534f97396915e13c9944e71dd422265c4f2c7c53277e3a73640d96e789e0

    • SHA512

      90d1876788260dfb8561ccd4b05d789385497f26dcd34839728a31493737430e1c61478497b67f0679c9df38fcc9f82a552418ce3c8ac8c1b399ef7e05232d08

    • SSDEEP

      1536:W7ZhA7pApMaxB4b0CYJ97lEVqNR7Yge+eJG/x/HfFpsJOfFpsJ8:6e7WpMaxeb0CYJ97lEYNR73e+eKZHfFl

    Score
    9/10
    ransomware

    • Renames multiple (3451) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks