Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

a26e6cef6b...cs.exe

windows7-x64

10

a26e6cef6b...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a26e6cef6b998d9e6755fe25b15e1710_NeikiAnalytics.exe

  • Size

    2.0MB

  • Sample

    240603-nz2bysde2t

  • MD5

    a26e6cef6b998d9e6755fe25b15e1710

  • SHA1

    4ea393ceca1f6ac6d5b4dc6f6842d0f9895e30c6

  • SHA256

    09beeeb89968940b35aefbf9f78f83a3fba0044051bfe4306b23a6c0729d91c8

  • SHA512

    9127f60993e8350c63d2f1d159831348a9bedf9f9efd08ab7d1f1719fe7527e5bbe84fe13c2fcc720a6894e13e75aa473aeebf3dec09ef8998af14e5a397f575

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6KI39:BemTLkNdfE0pZrw1

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      a26e6cef6b998d9e6755fe25b15e1710_NeikiAnalytics.exe

    • Size

      2.0MB

    • MD5

      a26e6cef6b998d9e6755fe25b15e1710

    • SHA1

      4ea393ceca1f6ac6d5b4dc6f6842d0f9895e30c6

    • SHA256

      09beeeb89968940b35aefbf9f78f83a3fba0044051bfe4306b23a6c0729d91c8

    • SHA512

      9127f60993e8350c63d2f1d159831348a9bedf9f9efd08ab7d1f1719fe7527e5bbe84fe13c2fcc720a6894e13e75aa473aeebf3dec09ef8998af14e5a397f575

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6KI39:BemTLkNdfE0pZrw1

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.