Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

09e7a825ed...cs.exe

windows7-x64

9

09e7a825ed...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    09e7a825edb8e3991f276fcd0cb9fe6d92b3b84a6330e29eddfb9cb9b973ec66_NeikiAnalytics.exe

  • Size

    87KB

  • Sample

    240629-2xw64ssbql

  • MD5

    9ce2d76b6297f92e37e0f5a4446ae420

  • SHA1

    fd63cd18169c5aaaf7d925640b42cc92b807b560

  • SHA256

    09e7a825edb8e3991f276fcd0cb9fe6d92b3b84a6330e29eddfb9cb9b973ec66

  • SHA512

    b1be2d33cd89ae5d247ebc638612b83052c47ac995a55eb561ea1807294939a7443b4406983943f05bfd1f27b4ca48831f60530d5e948c499b708dc062408343

  • SSDEEP

    1536:W7ZNLpApCZuvIYXqRHRv7ZNLpApCZuvIYXqRHRY:6NLWpCZLY6RHRtNLWpCZLY6RHRY

Score
9/10
ransomware

Malware Config

Targets

    • Target

      09e7a825edb8e3991f276fcd0cb9fe6d92b3b84a6330e29eddfb9cb9b973ec66_NeikiAnalytics.exe

    • Size

      87KB

    • MD5

      9ce2d76b6297f92e37e0f5a4446ae420

    • SHA1

      fd63cd18169c5aaaf7d925640b42cc92b807b560

    • SHA256

      09e7a825edb8e3991f276fcd0cb9fe6d92b3b84a6330e29eddfb9cb9b973ec66

    • SHA512

      b1be2d33cd89ae5d247ebc638612b83052c47ac995a55eb561ea1807294939a7443b4406983943f05bfd1f27b4ca48831f60530d5e948c499b708dc062408343

    • SSDEEP

      1536:W7ZNLpApCZuvIYXqRHRv7ZNLpApCZuvIYXqRHRY:6NLWpCZLY6RHRtNLWpCZLY6RHRY

    Score
    9/10
    ransomware

    • Renames multiple (5852) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks