Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
0baf968b2431209d904281476a75b04188751a3eb130231e6bf2cea552ef17d1
-
Size
301KB
-
Sample
230416-fejmeaha35
-
MD5
b1f5b6125991825cfb4a06104499b3ed
-
SHA1
c46a5fbbf1f9262fe4d7f08d507ec41de96fc9ae
-
SHA256
0baf968b2431209d904281476a75b04188751a3eb130231e6bf2cea552ef17d1
-
SHA512
798d1318a82bfaf24f42aaf4fee87c7d148bf9210bb5a889304026b9723520f9972073dbd37ee61f90293e5bba7576911f9a5ef9b5685d56e0ce5fbfc394029c
-
SSDEEP
6144:ZgKilj8OGsaOzcDLwjaGUxYM8wS3Y3avn4udWglY:ZFit8OGt6cP2ajZPK4ud
Static task
static1
Behavioral task
behavioral1
Sample
0baf968b2431209d904281476a75b04188751a3eb130231e6bf2cea552ef17d1.exe
Resource
win7-20230220-en
Malware Config
Targets
-
-
Target
0baf968b2431209d904281476a75b04188751a3eb130231e6bf2cea552ef17d1
-
Size
301KB
-
MD5
b1f5b6125991825cfb4a06104499b3ed
-
SHA1
c46a5fbbf1f9262fe4d7f08d507ec41de96fc9ae
-
SHA256
0baf968b2431209d904281476a75b04188751a3eb130231e6bf2cea552ef17d1
-
SHA512
798d1318a82bfaf24f42aaf4fee87c7d148bf9210bb5a889304026b9723520f9972073dbd37ee61f90293e5bba7576911f9a5ef9b5685d56e0ce5fbfc394029c
-
SSDEEP
6144:ZgKilj8OGsaOzcDLwjaGUxYM8wS3Y3avn4udWglY:ZFit8OGt6cP2ajZPK4ud
-
XMRig Miner payload
-
Downloads MZ/PE file
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Legitimate hosting services abused for malware hosting/C2
-
Suspicious use of SetThreadContext
-