Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

63c33e41ba...cs.exe

windows7-x64

10

63c33e41ba...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    63c33e41ba1a15f562ed52dd6ebee7e0_NeikiAnalytics.exe

  • Size

    1.4MB

  • Sample

    240525-psnmysbe5z

  • MD5

    63c33e41ba1a15f562ed52dd6ebee7e0

  • SHA1

    5277e8bdb2b0dc0f70d5034c54b0bc7f3586f20e

  • SHA256

    c7988d0523ff3c7998fb986818d96d8a454fcc742127fb8aa125926630021c84

  • SHA512

    ca9c9f41f035379e0c1b4c93f475550b0985f0aaeb8f3c1bb90d3982383dfc653074b938652576a993300533eeda97a8697f4db7961d3a181a7f430967e189d4

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkFfkeMlN675EgEPgsU5qTqOkDil2wE:Lz071uv4BPMkFfdg6Nsg

Score
10/10
xmrigexecutionminerupx

Malware Config

Targets

    • Target

      63c33e41ba1a15f562ed52dd6ebee7e0_NeikiAnalytics.exe

    • Size

      1.4MB

    • MD5

      63c33e41ba1a15f562ed52dd6ebee7e0

    • SHA1

      5277e8bdb2b0dc0f70d5034c54b0bc7f3586f20e

    • SHA256

      c7988d0523ff3c7998fb986818d96d8a454fcc742127fb8aa125926630021c84

    • SHA512

      ca9c9f41f035379e0c1b4c93f475550b0985f0aaeb8f3c1bb90d3982383dfc653074b938652576a993300533eeda97a8697f4db7961d3a181a7f430967e189d4

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkFfkeMlN675EgEPgsU5qTqOkDil2wE:Lz071uv4BPMkFfdg6Nsg

    Score
    10/10
    xmrigexecutionminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

      execution

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks