Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

d07ee7d909...cs.exe

windows7-x64

10

d07ee7d909...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d07ee7d909417de50966609b7260ee50_NeikiAnalytics.exe

  • Size

    4.1MB

  • Sample

    240608-tmj5ssdb6y

  • MD5

    d07ee7d909417de50966609b7260ee50

  • SHA1

    213df00140b785cb34f6c3652483a95e55689a72

  • SHA256

    610513a0318613f315ebd1976d2ad10060ba0f7fa07576c4f17e3003209f7eec

  • SHA512

    53a6a0997b81cf0f0f88963bc897aa340a88174409c01846e41d5e1e99c7b18df834ba4feb4bb1551dfecd59568f60c04010096e881c146321d35e2275945e2c

  • SSDEEP

    98304:71ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrW+:7bBeSFki

Score
10/10
xmrigexecutionminerupx

Malware Config

Targets

    • Target

      d07ee7d909417de50966609b7260ee50_NeikiAnalytics.exe

    • Size

      4.1MB

    • MD5

      d07ee7d909417de50966609b7260ee50

    • SHA1

      213df00140b785cb34f6c3652483a95e55689a72

    • SHA256

      610513a0318613f315ebd1976d2ad10060ba0f7fa07576c4f17e3003209f7eec

    • SHA512

      53a6a0997b81cf0f0f88963bc897aa340a88174409c01846e41d5e1e99c7b18df834ba4feb4bb1551dfecd59568f60c04010096e881c146321d35e2275945e2c

    • SSDEEP

      98304:71ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrW+:7bBeSFki

    Score
    10/10
    xmrigexecutionminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

      execution

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks