Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

308c779897...KI.exe

windows7-x64

10

308c779897...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    308c7798972df8e53a24d346f91d7a40_NEIKI

  • Size

    2.0MB

  • Sample

    240507-zr49esfe5x

  • MD5

    308c7798972df8e53a24d346f91d7a40

  • SHA1

    ad5a1a28cddd04abc6901f67b7c6a72931189746

  • SHA256

    f742f2e4321c67d368303665ae15e8fa60a7a414dd9c154046ae5bfe9369cdca

  • SHA512

    1a1a27adc9a9c2a4a12582b4be6c331d9986df4a6f6ea03dc19541af39da87f968155abb23809e461125b0f2f3a5b5a741f57c9a357a3bb4deff9ed020228a95

  • SSDEEP

    49152:T1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrSax91MkibTIDiH3gPDwCj:T1ONtyBeSFkXV1etEKLlWUTOfeiRA2RS

Score
10/10
xmrigexecutionminer

Malware Config

Targets

    • Target

      308c7798972df8e53a24d346f91d7a40_NEIKI

    • Size

      2.0MB

    • MD5

      308c7798972df8e53a24d346f91d7a40

    • SHA1

      ad5a1a28cddd04abc6901f67b7c6a72931189746

    • SHA256

      f742f2e4321c67d368303665ae15e8fa60a7a414dd9c154046ae5bfe9369cdca

    • SHA512

      1a1a27adc9a9c2a4a12582b4be6c331d9986df4a6f6ea03dc19541af39da87f968155abb23809e461125b0f2f3a5b5a741f57c9a357a3bb4deff9ed020228a95

    • SSDEEP

      49152:T1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrSax91MkibTIDiH3gPDwCj:T1ONtyBeSFkXV1etEKLlWUTOfeiRA2RS

    Score
    10/10
    xmrigexecutionminer

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

      execution

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks