Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2d7601d9930ef3c7ae3e374799233410_NeikiAnalytics.exe

  • Size

    1.8MB

  • Sample

    240607-b5sksafe7x

  • MD5

    2d7601d9930ef3c7ae3e374799233410

  • SHA1

    80924b0af8b9c307e1bbbfad66f40b3b6a696410

  • SHA256

    b5a64ac06b885831c5bc3aa925f0d87aae9e1ebcd5b327bf8e2e20b9de145947

  • SHA512

    7fd7cc562cc7fdd130b52025ad3598dcddd715c35298b84e7bef9e572e60843c1dc2c40a497a4e0837c3e923d0fd95dec697abeed7e1b01efebc499586d533a6

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjpbc8nJwbomvu2Nrlum7+a7EtLgCPimza:Lz071uv4BPMkHC0IBcAUNRSa7kj5za

Malware Config

Targets

    • Target

      2d7601d9930ef3c7ae3e374799233410_NeikiAnalytics.exe

    • Size

      1.8MB

    • MD5

      2d7601d9930ef3c7ae3e374799233410

    • SHA1

      80924b0af8b9c307e1bbbfad66f40b3b6a696410

    • SHA256

      b5a64ac06b885831c5bc3aa925f0d87aae9e1ebcd5b327bf8e2e20b9de145947

    • SHA512

      7fd7cc562cc7fdd130b52025ad3598dcddd715c35298b84e7bef9e572e60843c1dc2c40a497a4e0837c3e923d0fd95dec697abeed7e1b01efebc499586d533a6

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjpbc8nJwbomvu2Nrlum7+a7EtLgCPimza:Lz071uv4BPMkHC0IBcAUNRSa7kj5za

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks