Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

b299cda177...cs.exe

windows7-x64

10

b299cda177...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b299cda177e7ed5606c90d04a6ce4e80_NeikiAnalytics

  • Size

    1.7MB

  • Sample

    240513-mhq9zsac7t

  • MD5

    b299cda177e7ed5606c90d04a6ce4e80

  • SHA1

    8f985fd860f3d3822d57d830be2fedda589606fe

  • SHA256

    ac616d1bfcd36e81797b0f6a86b89b4d49ce3ba97b5e841d5e368238b4e7d6d9

  • SHA512

    99ef7dea5596e8ccddbb3ade742dda46c07a6476b7dfe40bb03f32da9ab723454c504d7cb54c9cc4bf3c5862b8306a25ba1b4a264b81cf948935bfbfb749fe04

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlOhSkEaFUG51+oAL7ZQJTVMKTbc1gsemVk8e+ogzOu:knw9oUUEEDlOh516Q+oxxcdBDog6Fg

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      b299cda177e7ed5606c90d04a6ce4e80_NeikiAnalytics

    • Size

      1.7MB

    • MD5

      b299cda177e7ed5606c90d04a6ce4e80

    • SHA1

      8f985fd860f3d3822d57d830be2fedda589606fe

    • SHA256

      ac616d1bfcd36e81797b0f6a86b89b4d49ce3ba97b5e841d5e368238b4e7d6d9

    • SHA512

      99ef7dea5596e8ccddbb3ade742dda46c07a6476b7dfe40bb03f32da9ab723454c504d7cb54c9cc4bf3c5862b8306a25ba1b4a264b81cf948935bfbfb749fe04

    • SSDEEP

      24576:JanwhSe11QSONCpGJCjETPlOhSkEaFUG51+oAL7ZQJTVMKTbc1gsemVk8e+ogzOu:knw9oUUEEDlOh516Q+oxxcdBDog6Fg

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks