Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

6455252d8a...KI.exe

windows7-x64

10

6455252d8a...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6455252d8a5cd08d825688796653eaa0_NEIKI

  • Size

    2.1MB

  • Sample

    240508-mjhdgaae24

  • MD5

    6455252d8a5cd08d825688796653eaa0

  • SHA1

    2eceb3b419f3b979aef881e0deb85bf828111bc6

  • SHA256

    2f3421937bc404510d4b7ce035e23ffcc7c139a16fdba752b17fdf8de28512e8

  • SHA512

    11ddfd81d2af02eaec05699af81ceb3c237fe474a329259f5358ced8efb611f5823c3f1f2b355d1832e8db2f280d4ed1d7f87f22c2df9e44e3996a38f9362e7e

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7kieEHcYT0wl:Lz071uv4BPMkibTIA5JnJ1V8/XWCcx

Score
10/10
xmrigexecutionminerupx

Malware Config

Targets

    • Target

      6455252d8a5cd08d825688796653eaa0_NEIKI

    • Size

      2.1MB

    • MD5

      6455252d8a5cd08d825688796653eaa0

    • SHA1

      2eceb3b419f3b979aef881e0deb85bf828111bc6

    • SHA256

      2f3421937bc404510d4b7ce035e23ffcc7c139a16fdba752b17fdf8de28512e8

    • SHA512

      11ddfd81d2af02eaec05699af81ceb3c237fe474a329259f5358ced8efb611f5823c3f1f2b355d1832e8db2f280d4ed1d7f87f22c2df9e44e3996a38f9362e7e

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7kieEHcYT0wl:Lz071uv4BPMkibTIA5JnJ1V8/XWCcx

    Score
    10/10
    xmrigexecutionminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

      execution

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks