Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
429223f2374f630c661714caef8e3247bbb6cfd6b0354bf4529233a66f46c228
-
Size
206KB
-
Sample
220909-j4tqfsdgcn
-
MD5
c7ccc0106e042fb84bb9a30d14239d88
-
SHA1
688d6637b1f49fe27983d7799d385b8b25b91e0a
-
SHA256
429223f2374f630c661714caef8e3247bbb6cfd6b0354bf4529233a66f46c228
-
SHA512
89cadd745958b76c045391dd13f09aaa8da5afb8dc9bc3796594122dc0d191daea39f391f564baa92d8014cb0a3da012aef484cf23f2663b954fab04c21a03bf
-
SSDEEP
3072:II4C5+VZNNA7P65ymfeBY2SXry2YipLh/E/CfsnzvUSN/rgRA:w/Nm7DLBJSXry2dpLWTnzUSN/
Static task
static1
Malware Config
Extracted
tofsee
svartalfheim.top
jotunheim.name
Targets
-
-
Target
429223f2374f630c661714caef8e3247bbb6cfd6b0354bf4529233a66f46c228
-
Size
206KB
-
MD5
c7ccc0106e042fb84bb9a30d14239d88
-
SHA1
688d6637b1f49fe27983d7799d385b8b25b91e0a
-
SHA256
429223f2374f630c661714caef8e3247bbb6cfd6b0354bf4529233a66f46c228
-
SHA512
89cadd745958b76c045391dd13f09aaa8da5afb8dc9bc3796594122dc0d191daea39f391f564baa92d8014cb0a3da012aef484cf23f2663b954fab04c21a03bf
-
SSDEEP
3072:II4C5+VZNNA7P65ymfeBY2SXry2YipLh/E/CfsnzvUSN/rgRA:w/Nm7DLBJSXry2dpLWTnzUSN/
-
XMRig Miner payload
-
Creates new service(s)
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Sets service image path in registry
-
Deletes itself
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-