Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

09a0a2ca24...cs.exe

windows7-x64

10

09a0a2ca24...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    09a0a2ca246bbf99d96fb9bd129d90421755d1e4850671a641587e3b881dc680_NeikiAnalytics.exe

  • Size

    1.5MB

  • Sample

    240627-vtc6ha1fjb

  • MD5

    28ee700f85f8f9d42b6ddb75c2bfca80

  • SHA1

    4962dbd5af354e12f065b29edfcb18dde271c2cc

  • SHA256

    09a0a2ca246bbf99d96fb9bd129d90421755d1e4850671a641587e3b881dc680

  • SHA512

    4f932ea99d9ba6ba5971ab72341f5fa609d8003f4b12de6ae43aeb0008fcc314e37ab8b656691dda6ac89b5d630b9495a08e7f66fa0f655320b51161bb824b0a

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727ZvhwJWe9pY4p9XvOjeUlV/oPVHsv4TuUgGqj15G+y:ROdWCCi7/rahoyS6SHb8GSxy

Score
10/10
xmrigminerpersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      09a0a2ca246bbf99d96fb9bd129d90421755d1e4850671a641587e3b881dc680_NeikiAnalytics.exe

    • Size

      1.5MB

    • MD5

      28ee700f85f8f9d42b6ddb75c2bfca80

    • SHA1

      4962dbd5af354e12f065b29edfcb18dde271c2cc

    • SHA256

      09a0a2ca246bbf99d96fb9bd129d90421755d1e4850671a641587e3b881dc680

    • SHA512

      4f932ea99d9ba6ba5971ab72341f5fa609d8003f4b12de6ae43aeb0008fcc314e37ab8b656691dda6ac89b5d630b9495a08e7f66fa0f655320b51161bb824b0a

    • SSDEEP

      24576:RVIl/WDGCi7/qkatXBF6727ZvhwJWe9pY4p9XvOjeUlV/oPVHsv4TuUgGqj15G+y:ROdWCCi7/rahoyS6SHb8GSxy

    Score
    10/10
    xmrigminerpersistenceprivilege_escalationupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks