Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

7

41a723c5ca...cs.exe

windows7-x64

9

41a723c5ca...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    41a723c5ca53b597b89be496e6de43c82195e1dbc2da947d879c633f7b66ee04_NeikiAnalytics.exe

  • Size

    117KB

  • Sample

    240701-jwgqxstekk

  • MD5

    649ff0a02e85de571ee94641bd9120c0

  • SHA1

    c64c8dbff8314354f65ecdf179544665bb641137

  • SHA256

    41a723c5ca53b597b89be496e6de43c82195e1dbc2da947d879c633f7b66ee04

  • SHA512

    6b988861e0c12715288f1e7d316a294f4d59df4ef7288266946b369a5130786a04a7ceaac2a61345a34d589d1670e0b070a5d3680ee3707f2dd8ef2158d9e905

  • SSDEEP

    1536:CTWn1++PJHJXA/OsIZfzc3/Q8IZZ7n97nFTWn1++PJHJXA/OsIZfzc3/Q8IZZ7n7:KQSo7ZFZxQSo7ZFZNvn

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      41a723c5ca53b597b89be496e6de43c82195e1dbc2da947d879c633f7b66ee04_NeikiAnalytics.exe

    • Size

      117KB

    • MD5

      649ff0a02e85de571ee94641bd9120c0

    • SHA1

      c64c8dbff8314354f65ecdf179544665bb641137

    • SHA256

      41a723c5ca53b597b89be496e6de43c82195e1dbc2da947d879c633f7b66ee04

    • SHA512

      6b988861e0c12715288f1e7d316a294f4d59df4ef7288266946b369a5130786a04a7ceaac2a61345a34d589d1670e0b070a5d3680ee3707f2dd8ef2158d9e905

    • SSDEEP

      1536:CTWn1++PJHJXA/OsIZfzc3/Q8IZZ7n97nFTWn1++PJHJXA/OsIZfzc3/Q8IZZ7n7:KQSo7ZFZxQSo7ZFZNvn

    Score
    9/10
    ransomwareupx

    • Renames multiple (5102) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks