Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    file.exe

  • Size

    2.5MB

  • Sample

    230713-qrtm9ahg21

  • MD5

    f339ecfb8d74dc53102ca10d1b34b307

  • SHA1

    ad11d6129270cbe9f681a9dba78134ca2b451bd7

  • SHA256

    6c649c5633d1b3b8832e1b5c13b176482179f38cfb021a5f81e22757788c72b0

  • SHA512

    7fac9c54e9fe794d0f80be4eb724f2ef9735e1fb2f3a9590cc67ac8f3cec9259422dc4f99fd225c0395641a92d6d0b21a0ae4875b30632dfe0b4c6d0cfa96b70

  • SSDEEP

    24576:Fq3yIhAzArEu+epp7T6km+Q+VuhHQDaEFRGocQngdHdq/UN3RZ7T:FuELLer1m+QZwDZRGXQngdHd5NRZ

Score
10/10

Malware Config

Targets

    • Target

      file.exe

    • Size

      2.5MB

    • MD5

      f339ecfb8d74dc53102ca10d1b34b307

    • SHA1

      ad11d6129270cbe9f681a9dba78134ca2b451bd7

    • SHA256

      6c649c5633d1b3b8832e1b5c13b176482179f38cfb021a5f81e22757788c72b0

    • SHA512

      7fac9c54e9fe794d0f80be4eb724f2ef9735e1fb2f3a9590cc67ac8f3cec9259422dc4f99fd225c0395641a92d6d0b21a0ae4875b30632dfe0b4c6d0cfa96b70

    • SSDEEP

      24576:Fq3yIhAzArEu+epp7T6km+Q+VuhHQDaEFRGocQngdHdq/UN3RZ7T:FuELLer1m+QZwDZRGXQngdHd5NRZ

    Score
    10/10
    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks