Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    696dba35ecabffa21188d3717683a9206d13adf25d2b0fa4330787fd1b5de768

  • Size

    5.2MB

  • Sample

    231012-bt84dshg88

  • MD5

    1c03c03c559f45cd292ebfd073201dd5

  • SHA1

    f90581a94254d7957c8672994a8c636b33236f75

  • SHA256

    696dba35ecabffa21188d3717683a9206d13adf25d2b0fa4330787fd1b5de768

  • SHA512

    41066db969cafd24508f7cc75c4a60bbba3772546e6c255b767130556294abe805d649272f48e739f4d56132c48970d47d5e18488fd9ebabe10ece048ec450f0

  • SSDEEP

    98304:/fBrF6F59tdDZRL19sH6Gk5W5DPios5bWpm8E0TCMc+geQf8n0+iAORP/:3xF6L9tdDZRZeHVk5g1MbWpm8E0G9+Pu

Score
10/10
xmrigevasionminer

Malware Config

Targets

    • Target

      696dba35ecabffa21188d3717683a9206d13adf25d2b0fa4330787fd1b5de768

    • Size

      5.2MB

    • MD5

      1c03c03c559f45cd292ebfd073201dd5

    • SHA1

      f90581a94254d7957c8672994a8c636b33236f75

    • SHA256

      696dba35ecabffa21188d3717683a9206d13adf25d2b0fa4330787fd1b5de768

    • SHA512

      41066db969cafd24508f7cc75c4a60bbba3772546e6c255b767130556294abe805d649272f48e739f4d56132c48970d47d5e18488fd9ebabe10ece048ec450f0

    • SSDEEP

      98304:/fBrF6F59tdDZRL19sH6Gk5W5DPios5bWpm8E0TCMc+geQf8n0+iAORP/:3xF6L9tdDZRZeHVk5g1MbWpm8E0G9+Pu

    Score
    10/10
    xmrigevasionminer

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Drops file in Drivers directory

    • Stops running service(s)

      evasion

    • Executes dropped EXE

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks