Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
file.exe
-
Size
2.5MB
-
Sample
230713-qrtm9ahg21
-
MD5
f339ecfb8d74dc53102ca10d1b34b307
-
SHA1
ad11d6129270cbe9f681a9dba78134ca2b451bd7
-
SHA256
6c649c5633d1b3b8832e1b5c13b176482179f38cfb021a5f81e22757788c72b0
-
SHA512
7fac9c54e9fe794d0f80be4eb724f2ef9735e1fb2f3a9590cc67ac8f3cec9259422dc4f99fd225c0395641a92d6d0b21a0ae4875b30632dfe0b4c6d0cfa96b70
-
SSDEEP
24576:Fq3yIhAzArEu+epp7T6km+Q+VuhHQDaEFRGocQngdHdq/UN3RZ7T:FuELLer1m+QZwDZRGXQngdHd5NRZ
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230712-en
Malware Config
Targets
-
-
Target
file.exe
-
Size
2.5MB
-
MD5
f339ecfb8d74dc53102ca10d1b34b307
-
SHA1
ad11d6129270cbe9f681a9dba78134ca2b451bd7
-
SHA256
6c649c5633d1b3b8832e1b5c13b176482179f38cfb021a5f81e22757788c72b0
-
SHA512
7fac9c54e9fe794d0f80be4eb724f2ef9735e1fb2f3a9590cc67ac8f3cec9259422dc4f99fd225c0395641a92d6d0b21a0ae4875b30632dfe0b4c6d0cfa96b70
-
SSDEEP
24576:Fq3yIhAzArEu+epp7T6km+Q+VuhHQDaEFRGocQngdHdq/UN3RZ7T:FuELLer1m+QZwDZRGXQngdHd5NRZ
-
XMRig Miner payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-