Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2b8947a9002f665e0bd7aa9d831210e21ad4959343f77fbc8d2f6e3c06f952a5_NeikiAnalytics.exe

  • Size

    1.6MB

  • Sample

    240625-efq77ssemk

  • MD5

    e0c1619bd9d249d110486ee39d3690b0

  • SHA1

    0b1e3b05d0b0aed93c4ce674ae8ba2167dab0370

  • SHA256

    2b8947a9002f665e0bd7aa9d831210e21ad4959343f77fbc8d2f6e3c06f952a5

  • SHA512

    29fe7a8e468080e2d5be98fdb6954ee872485d394f3393e58ffcf98a19cd379e3befb71ac649cabb154415fc7376233e24e9966e80f95c4fc96fb3bb906d9af6

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlOd4shdMlhz8zdGgC8E7onG7p8lBhNlrEL6a+:knw9oUUEEDlOd/dM5glGyJrg6a+

Score
10/10

Malware Config

Targets

    • Target

      2b8947a9002f665e0bd7aa9d831210e21ad4959343f77fbc8d2f6e3c06f952a5_NeikiAnalytics.exe

    • Size

      1.6MB

    • MD5

      e0c1619bd9d249d110486ee39d3690b0

    • SHA1

      0b1e3b05d0b0aed93c4ce674ae8ba2167dab0370

    • SHA256

      2b8947a9002f665e0bd7aa9d831210e21ad4959343f77fbc8d2f6e3c06f952a5

    • SHA512

      29fe7a8e468080e2d5be98fdb6954ee872485d394f3393e58ffcf98a19cd379e3befb71ac649cabb154415fc7376233e24e9966e80f95c4fc96fb3bb906d9af6

    • SSDEEP

      24576:JanwhSe11QSONCpGJCjETPlOd4shdMlhz8zdGgC8E7onG7p8lBhNlrEL6a+:knw9oUUEEDlOd/dM5glGyJrg6a+

    Score
    10/10
    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks