Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0baf968b2431209d904281476a75b04188751a3eb130231e6bf2cea552ef17d1

  • Size

    301KB

  • Sample

    230416-fejmeaha35

  • MD5

    b1f5b6125991825cfb4a06104499b3ed

  • SHA1

    c46a5fbbf1f9262fe4d7f08d507ec41de96fc9ae

  • SHA256

    0baf968b2431209d904281476a75b04188751a3eb130231e6bf2cea552ef17d1

  • SHA512

    798d1318a82bfaf24f42aaf4fee87c7d148bf9210bb5a889304026b9723520f9972073dbd37ee61f90293e5bba7576911f9a5ef9b5685d56e0ce5fbfc394029c

  • SSDEEP

    6144:ZgKilj8OGsaOzcDLwjaGUxYM8wS3Y3avn4udWglY:ZFit8OGt6cP2ajZPK4ud

Score
10/10

Malware Config

Targets

    • Target

      0baf968b2431209d904281476a75b04188751a3eb130231e6bf2cea552ef17d1

    • Size

      301KB

    • MD5

      b1f5b6125991825cfb4a06104499b3ed

    • SHA1

      c46a5fbbf1f9262fe4d7f08d507ec41de96fc9ae

    • SHA256

      0baf968b2431209d904281476a75b04188751a3eb130231e6bf2cea552ef17d1

    • SHA512

      798d1318a82bfaf24f42aaf4fee87c7d148bf9210bb5a889304026b9723520f9972073dbd37ee61f90293e5bba7576911f9a5ef9b5685d56e0ce5fbfc394029c

    • SSDEEP

      6144:ZgKilj8OGsaOzcDLwjaGUxYM8wS3Y3avn4udWglY:ZFit8OGt6cP2ajZPK4ud

    Score
    10/10
    • XMRig Miner payload

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • Downloads MZ/PE file

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks