xmrig | 337dc9fc0f98405d032a9da6616c2a9f54331d6f2604ac55c2f9eeba45ea7df2 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

337dc9fc0f...cs.exe

windows7-x64

337dc9fc0f...cs.exe

windows10-2004-x64

Sharing

General

Target

337dc9fc0f98405d032a9da6616c2a9f54331d6f2604ac55c2f9eeba45ea7df2_NeikiAnalytics
Size

2.3MB
Sample

240521-l75m8she93
MD5

c287fccd6fb3d6484a69cc47a5eab310
SHA1

b7aef84c2211cd9850d9b1f7cc883b69fd1c798e
SHA256

337dc9fc0f98405d032a9da6616c2a9f54331d6f2604ac55c2f9eeba45ea7df2
SHA512

44b0eb27a0c340e4e05abb510230d9c497b212bd222e580611279937454e8ae23d67e48d51e3d4bb66514b7edb0a395a5c93d26e57305046eea5d5712a83ac46
SSDEEP

49152:BezaTF8FcNkNdfE0pZ9ozt4wIQFHKsUKC6PeOwctWko:BemTLkNdfE0pZrQy

Score

10^/10

xmrig miner upx

Static task

static1

miner upx xmrig

4 signatures

Behavioral task

behavioral1

Sample

337dc9fc0f98405d032a9da6616c2a9f54331d6f2604ac55c2f9eeba45ea7df2_NeikiAnalytics.exe

Resource

win7-20240508-en

xmrig miner upx

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

337dc9fc0f98405d032a9da6616c2a9f54331d6f2604ac55c2f9eeba45ea7df2_NeikiAnalytics.exe

Resource

win10v2004-20240508-en

xmrig miner upx

windows10-2004-x64

10 signatures

150 seconds

Malware Config

Targets

- Target
  
  337dc9fc0f98405d032a9da6616c2a9f54331d6f2604ac55c2f9eeba45ea7df2_NeikiAnalytics
- Size
  
  2.3MB
- MD5
  
  c287fccd6fb3d6484a69cc47a5eab310
- SHA1
  
  b7aef84c2211cd9850d9b1f7cc883b69fd1c798e
- SHA256
  
  337dc9fc0f98405d032a9da6616c2a9f54331d6f2604ac55c2f9eeba45ea7df2
- SHA512
  
  44b0eb27a0c340e4e05abb510230d9c497b212bd222e580611279937454e8ae23d67e48d51e3d4bb66514b7edb0a395a5c93d26e57305046eea5d5712a83ac46
- SSDEEP
  
  49152:BezaTF8FcNkNdfE0pZ9ozt4wIQFHKsUKC6PeOwctWko:BemTLkNdfE0pZrQy
Score

10^/10

xmrig miner upx
- xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- XMRig Miner payload
  miner
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2025

Terms | Privacy