Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b031a99b8d27f4e714b1c8d6bfc76940_NeikiAnalytics.exe

  • Size

    1.7MB

  • Sample

    240524-ft23asef58

  • MD5

    b031a99b8d27f4e714b1c8d6bfc76940

  • SHA1

    08db254ee681ab5474a33228a1e69f7c787d3bb1

  • SHA256

    98514f9ddea025448db573d443ec3cbda0f497279347f1f9bbf95254088bfcd9

  • SHA512

    c1799953b17aa5a637e075a387ba6442db3621e1f4506678efa4bef5208365adf1a49bfa7e783abc739ffcc83f0df5d7fc9cb313f41db46428dd5d3254207c66

  • SSDEEP

    49152:Lz071uv4BPMkHC0IaSEzQR4iRFlX+IADb9:NABj

Malware Config

Targets

    • Target

      b031a99b8d27f4e714b1c8d6bfc76940_NeikiAnalytics.exe

    • Size

      1.7MB

    • MD5

      b031a99b8d27f4e714b1c8d6bfc76940

    • SHA1

      08db254ee681ab5474a33228a1e69f7c787d3bb1

    • SHA256

      98514f9ddea025448db573d443ec3cbda0f497279347f1f9bbf95254088bfcd9

    • SHA512

      c1799953b17aa5a637e075a387ba6442db3621e1f4506678efa4bef5208365adf1a49bfa7e783abc739ffcc83f0df5d7fc9cb313f41db46428dd5d3254207c66

    • SSDEEP

      49152:Lz071uv4BPMkHC0IaSEzQR4iRFlX+IADb9:NABj

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Blocklisted process makes network request

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.