Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
e8faad746a67a36aa9f7ed61e3f4b96c51edc970d2fae896434c98f6412c1f38
-
Size
1.4MB
-
Sample
230102-1a5z3agc44
-
MD5
b31fe52d28bc99d02f48f391f7d2ce92
-
SHA1
beb093d4577a3fc4cb603e19623daacb01fab84f
-
SHA256
e8faad746a67a36aa9f7ed61e3f4b96c51edc970d2fae896434c98f6412c1f38
-
SHA512
da92a26b6ff4af57cca8b452eee2962d6e35cb05e417c3968989b6318535a310ac889c6841e00041b1cee19a0baa8d27ea8a6ce2e15acc6a9694393bf9dffba4
-
SSDEEP
24576:65CqYT6LgebcHTfOHnMQaUtX+m00BxvAU0LMy:ICqYTSgewHYnSUtu4TFpy
Static task
static1
Malware Config
Targets
-
-
Target
e8faad746a67a36aa9f7ed61e3f4b96c51edc970d2fae896434c98f6412c1f38
-
Size
1.4MB
-
MD5
b31fe52d28bc99d02f48f391f7d2ce92
-
SHA1
beb093d4577a3fc4cb603e19623daacb01fab84f
-
SHA256
e8faad746a67a36aa9f7ed61e3f4b96c51edc970d2fae896434c98f6412c1f38
-
SHA512
da92a26b6ff4af57cca8b452eee2962d6e35cb05e417c3968989b6318535a310ac889c6841e00041b1cee19a0baa8d27ea8a6ce2e15acc6a9694393bf9dffba4
-
SSDEEP
24576:65CqYT6LgebcHTfOHnMQaUtX+m00BxvAU0LMy:ICqYTSgewHYnSUtu4TFpy
-
XMRig Miner payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Uses the VBS compiler for execution
-
Suspicious use of SetThreadContext
-