Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

11f37ac7a5...cs.exe

windows7-x64

10

11f37ac7a5...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    11f37ac7a52ed7038a830805c0ed0270_NeikiAnalytics.exe

  • Size

    1.6MB

  • Sample

    240524-jsneasae78

  • MD5

    11f37ac7a52ed7038a830805c0ed0270

  • SHA1

    7f408ab8a154f7ded44c071cf9d62f456d106ce7

  • SHA256

    4dd1c894b519214e4493c3bf953a9644056c1e1ac4a7215ba461beaaf953085d

  • SHA512

    54fb5034e77ac3d2d38713313b121bd5b0cee9c0f9a96772ad2083081a827b3042f42aa3d0cb51c3bf9b5e37a0a9e60d95d901ff3563e48465b7ed56b48c9693

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkFfkeMlN675EgEPgsU5qTqOk0t2MPnt4Jh/eFJ:Lz071uv4BPMkFfdg6NsTt2MP/

Score
10/10
xmrigexecutionminerupx

Malware Config

Targets

    • Target

      11f37ac7a52ed7038a830805c0ed0270_NeikiAnalytics.exe

    • Size

      1.6MB

    • MD5

      11f37ac7a52ed7038a830805c0ed0270

    • SHA1

      7f408ab8a154f7ded44c071cf9d62f456d106ce7

    • SHA256

      4dd1c894b519214e4493c3bf953a9644056c1e1ac4a7215ba461beaaf953085d

    • SHA512

      54fb5034e77ac3d2d38713313b121bd5b0cee9c0f9a96772ad2083081a827b3042f42aa3d0cb51c3bf9b5e37a0a9e60d95d901ff3563e48465b7ed56b48c9693

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkFfkeMlN675EgEPgsU5qTqOk0t2MPnt4Jh/eFJ:Lz071uv4BPMkFfdg6NsTt2MP/

    Score
    10/10
    xmrigexecutionminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

      execution

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks