Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    file.exe

  • Size

    2.7MB

  • Sample

    221227-slqqhsac4v

  • MD5

    4f62eb4f1a2c1fc46df059120e6e6cef

  • SHA1

    bd2fcde45f562ec5b0c741fa102c3dfa0234d511

  • SHA256

    6ee27f5f4be9f1cfeb98b5190367ca60d1c81b527b730d808b4b29e30b44931d

  • SHA512

    38c9d721302f345a8c1efcf6d40a735e181b67d2fe8e19bf5a20e6347de325f1c974f553ad640553f1fe3546729600a8d485964a36fbb6d76d7c58244ac72dd3

  • SSDEEP

    49152:IvEl6mjUImipdKvT6QD66iMVptYC0qs7QVlWSwI9SrxCsU:IamScvPfOCHs8yCs

Score
10/10

Malware Config

Targets

    • Target

      file.exe

    • Size

      2.7MB

    • MD5

      4f62eb4f1a2c1fc46df059120e6e6cef

    • SHA1

      bd2fcde45f562ec5b0c741fa102c3dfa0234d511

    • SHA256

      6ee27f5f4be9f1cfeb98b5190367ca60d1c81b527b730d808b4b29e30b44931d

    • SHA512

      38c9d721302f345a8c1efcf6d40a735e181b67d2fe8e19bf5a20e6347de325f1c974f553ad640553f1fe3546729600a8d485964a36fbb6d76d7c58244ac72dd3

    • SSDEEP

      49152:IvEl6mjUImipdKvT6QD66iMVptYC0qs7QVlWSwI9SrxCsU:IamScvPfOCHs8yCs

    Score
    10/10
    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Uses the VBS compiler for execution

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks