Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

9b976c1da9...cs.exe

windows7-x64

10

9b976c1da9...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9b976c1da9157ecfd86eaa3dec1d8e10_NeikiAnalytics

  • Size

    1.9MB

  • Sample

    240516-fdbkeace3t

  • MD5

    9b976c1da9157ecfd86eaa3dec1d8e10

  • SHA1

    66e3b29d4769a0afd45ce0c2d6d5d730e888a242

  • SHA256

    3e155deca1b6c8cd4f62d4f6ffe75098b54b104030106f4147744c8281de3141

  • SHA512

    e6d94d037be4c760c170c911644fef2325aa9afb587db0bf011213ad8cb4134f5fd0fc0b2e1b6a8e05ad13d7b759c46ca2a670e64ce113e9f6080b23181447f4

  • SSDEEP

    49152:T1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrSax91MkibTIDiaed:T1ONtyBeSFkXV1etEKLlWUTOfeiRA2Rt

Score
10/10
xmrigexecutionminer

Malware Config

Targets

    • Target

      9b976c1da9157ecfd86eaa3dec1d8e10_NeikiAnalytics

    • Size

      1.9MB

    • MD5

      9b976c1da9157ecfd86eaa3dec1d8e10

    • SHA1

      66e3b29d4769a0afd45ce0c2d6d5d730e888a242

    • SHA256

      3e155deca1b6c8cd4f62d4f6ffe75098b54b104030106f4147744c8281de3141

    • SHA512

      e6d94d037be4c760c170c911644fef2325aa9afb587db0bf011213ad8cb4134f5fd0fc0b2e1b6a8e05ad13d7b759c46ca2a670e64ce113e9f6080b23181447f4

    • SSDEEP

      49152:T1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrSax91MkibTIDiaed:T1ONtyBeSFkXV1etEKLlWUTOfeiRA2Rt

    Score
    10/10
    xmrigexecutionminer

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

      execution

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks