Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

1ef3e1e437...KI.exe

windows7-x64

10

1ef3e1e437...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1ef3e1e437919f9c2fefc109daed8e30_NEIKI

  • Size

    2.9MB

  • Sample

    240508-x6zldabd5z

  • MD5

    1ef3e1e437919f9c2fefc109daed8e30

  • SHA1

    e61a5c15104ed6d4e1b47e1fc903921138b1eeaf

  • SHA256

    f249824c4aaa90dfd3363cd8ebdadf0bb26a4504405a1c2edee3139a3ec7b136

  • SHA512

    b488cfb4ba3887c37562d0a25cb305425f78a340aee5b86a27d7338d996f8e592e7373a5085b1b95e98bb6e5194495fa9e327f019ecc507e65326218013bbfd9

  • SSDEEP

    49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8Dze7jcmWH/xbnbJoB:N0GnJMOWPClFdx6e0EALKWVTffZiPAco

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      1ef3e1e437919f9c2fefc109daed8e30_NEIKI

    • Size

      2.9MB

    • MD5

      1ef3e1e437919f9c2fefc109daed8e30

    • SHA1

      e61a5c15104ed6d4e1b47e1fc903921138b1eeaf

    • SHA256

      f249824c4aaa90dfd3363cd8ebdadf0bb26a4504405a1c2edee3139a3ec7b136

    • SHA512

      b488cfb4ba3887c37562d0a25cb305425f78a340aee5b86a27d7338d996f8e592e7373a5085b1b95e98bb6e5194495fa9e327f019ecc507e65326218013bbfd9

    • SSDEEP

      49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8Dze7jcmWH/xbnbJoB:N0GnJMOWPClFdx6e0EALKWVTffZiPAco

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks