Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
57bdc8905bd6e90bd28e1f1fc5f0c5e0_NeikiAnalytics.exe
-
Size
1.5MB
-
Sample
240525-l1qkqsde75
-
MD5
57bdc8905bd6e90bd28e1f1fc5f0c5e0
-
SHA1
787aa03ac0c229e8f641529492c6a9f305a66a2f
-
SHA256
cfe72bbffba78685a5570aed347f1d58f650cc7a9171e831545f53552f1a68ef
-
SHA512
c3bc1cdd8a1848272a3a461b2b2ce23e1d14d9732396ecbc164e6906c0f9f62c9c4d1615d54bf8752d060871d44cda9d8773fd49085dbc2e0da82e088ad8a90a
-
SSDEEP
24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjhnXwx8/2Pbx/mbjbaHtAcHN:Lz071uv4BPMkHC0IlnASEx/z+ct
Behavioral task
behavioral1
Sample
57bdc8905bd6e90bd28e1f1fc5f0c5e0_NeikiAnalytics.exe
Resource
win7-20240508-en
Malware Config
Targets
-
-
Target
57bdc8905bd6e90bd28e1f1fc5f0c5e0_NeikiAnalytics.exe
-
Size
1.5MB
-
MD5
57bdc8905bd6e90bd28e1f1fc5f0c5e0
-
SHA1
787aa03ac0c229e8f641529492c6a9f305a66a2f
-
SHA256
cfe72bbffba78685a5570aed347f1d58f650cc7a9171e831545f53552f1a68ef
-
SHA512
c3bc1cdd8a1848272a3a461b2b2ce23e1d14d9732396ecbc164e6906c0f9f62c9c4d1615d54bf8752d060871d44cda9d8773fd49085dbc2e0da82e088ad8a90a
-
SSDEEP
24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjhnXwx8/2Pbx/mbjbaHtAcHN:Lz071uv4BPMkHC0IlnASEx/z+ct
-
XMRig Miner payload
-
Blocklisted process makes network request
-
Executes dropped EXE
-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-