Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

27/04/2023, 22:43 UTC

230427-2nm7vaad49 10

27/04/2023, 22:15 UTC

230427-16llasac46 10

27/04/2023, 22:13 UTC

230427-15e25aac38 10

27/04/2023, 22:01 UTC

230427-1xc8kaab97 10

27/04/2023, 21:55 UTC

230427-1s5r1scb6w 10

27/04/2023, 21:49 UTC

230427-1pm3ssab72 10

27/04/2023, 21:41 UTC

230427-1jz56sab53 10

27/04/2023, 21:27 UTC

230427-1a6llaaa73 10

27/04/2023, 21:21 UTC

230427-z7mz3saa62 10

General

  • Target

    MdMmj4NJJOwpyc9.exe

  • Size

    6.9MB

  • Sample

    230413-yyx81sfc51

  • MD5

    925b225bdfaec5df3055dfc87431c593

  • SHA1

    dc38d7815845e2a63f51f57381899cf7a74f9ea0

  • SHA256

    7e47da0e1a15eebd308ddd58d2902104186c817773d7fa5e5ebd7ff282adf489

  • SHA512

    2aa927028c9d6d7e03d4cefda3c2bf5277fa2373741407fabf561e40e37b1ecc7aba6278b1b6e26d060a50a52217acee6c332460353eda3168ad72755cae0c95

  • SSDEEP

    196608:bI2HdQmRrdA6lXCy1ArqkVpKCX+PrF4Z22eghOJg9:c2HdQOlXrAZYCuPJO22egoJg

Score
10/10

Malware Config

Targets

    • Target

      MdMmj4NJJOwpyc9.exe

    • Size

      6.9MB

    • MD5

      925b225bdfaec5df3055dfc87431c593

    • SHA1

      dc38d7815845e2a63f51f57381899cf7a74f9ea0

    • SHA256

      7e47da0e1a15eebd308ddd58d2902104186c817773d7fa5e5ebd7ff282adf489

    • SHA512

      2aa927028c9d6d7e03d4cefda3c2bf5277fa2373741407fabf561e40e37b1ecc7aba6278b1b6e26d060a50a52217acee6c332460353eda3168ad72755cae0c95

    • SSDEEP

      196608:bI2HdQmRrdA6lXCy1ArqkVpKCX+PrF4Z22eghOJg9:c2HdQOlXrAZYCuPJO22egoJg

    Score
    10/10
    • XMRig Miner payload

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Matrix

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.