Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

754f7b60da...cs.exe

windows7-x64

10

754f7b60da...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    754f7b60da570d3cffcd6f5c5f819d60_NeikiAnalytics.exe

  • Size

    1.3MB

  • Sample

    240613-mqhmtavfpd

  • MD5

    754f7b60da570d3cffcd6f5c5f819d60

  • SHA1

    477fa8d358653caf90b74931e09910e5b8af841b

  • SHA256

    7f270bbfb97abc367e286a8bff7c5f39d5913dbce7b530c0d286da97c6cb66a4

  • SHA512

    67ab3e89d78d6626aad15867ba96953a9e013fb07fd059bc88f3cb621e88831a42a698ed811a38b7d132e49c8f36ddf5b7ea860347088c3127a542035f4f393b

  • SSDEEP

    24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQ0+wCIygDsAUSTsU9+i67Nn9:ROdWCCi7/raZ5aIwC+Agr6SNasrii

Score
10/10
kpotxmrigminerstealertrojanupx

Malware Config

Targets

    • Target

      754f7b60da570d3cffcd6f5c5f819d60_NeikiAnalytics.exe

    • Size

      1.3MB

    • MD5

      754f7b60da570d3cffcd6f5c5f819d60

    • SHA1

      477fa8d358653caf90b74931e09910e5b8af841b

    • SHA256

      7f270bbfb97abc367e286a8bff7c5f39d5913dbce7b530c0d286da97c6cb66a4

    • SHA512

      67ab3e89d78d6626aad15867ba96953a9e013fb07fd059bc88f3cb621e88831a42a698ed811a38b7d132e49c8f36ddf5b7ea860347088c3127a542035f4f393b

    • SSDEEP

      24576:RVIl/WDGCi7/qkat6Q5aILMCfmAUjzX6xQ0+wCIygDsAUSTsU9+i67Nn9:ROdWCCi7/raZ5aIwC+Agr6SNasrii

    Score
    10/10
    kpotxmrigminerstealertrojanupx

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks