Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    5c90f5ff772a5077d3b36bb22635db10_NeikiAnalytics.exe

  • Size

    1.9MB

  • Sample

    240516-3vk7hafb4w

  • MD5

    5c90f5ff772a5077d3b36bb22635db10

  • SHA1

    d73ce4b4680eaff8e0c0ab12a64f2caac8c72f55

  • SHA256

    0541fa3d9b3d0687ed0e349885bb08b23d71382ac3cdc1ed95eb3616a0580659

  • SHA512

    abaa31e8b23f19a6617facea2e9de5dc3f6eede30571bffbcb2d89a2911779d1701fab17d955ad1324e9a93dda1b26011a29ebe3a7d94bd0c83ddcb27cbe08f4

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5I4TNrpDGfFzcoYc:NABD

Malware Config

Targets

    • Target

      5c90f5ff772a5077d3b36bb22635db10_NeikiAnalytics.exe

    • Size

      1.9MB

    • MD5

      5c90f5ff772a5077d3b36bb22635db10

    • SHA1

      d73ce4b4680eaff8e0c0ab12a64f2caac8c72f55

    • SHA256

      0541fa3d9b3d0687ed0e349885bb08b23d71382ac3cdc1ed95eb3616a0580659

    • SHA512

      abaa31e8b23f19a6617facea2e9de5dc3f6eede30571bffbcb2d89a2911779d1701fab17d955ad1324e9a93dda1b26011a29ebe3a7d94bd0c83ddcb27cbe08f4

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5I4TNrpDGfFzcoYc:NABD

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks