Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file.exe

  • Size

    5.6MB

  • Sample

    231107-vlttaadh22

  • MD5

    40253a5c2afc1bddfe2a9cb958b51a04

  • SHA1

    9fb0a04691588e6c6dd300b76bb21f635baadaad

  • SHA256

    345e2079dbfff1b00d5f13dc881b21383ab1d15e36739ac951df51dc0fa4f835

  • SHA512

    f2a5e867578de904e1fd5e1f52230ea4b812bbc5deff0ef9a036150809aa9d271b679f67d54ee240d98cc974884e5854cc66cd8e1013c24dcf0d701509d38b2b

  • SSDEEP

    98304:xTeyCFQywfwd3PquhdAl5a8Sgyr3XtM9jrU9ruoZ8D92JaXUz8+GCRbBxWQw:xqy+x5P5dK5HSgQX+9jrU1uoCB2JwSRI

Score
10/10
xmrigevasionminer

Malware Config

Targets

    • Target

      file.exe

    • Size

      5.6MB

    • MD5

      40253a5c2afc1bddfe2a9cb958b51a04

    • SHA1

      9fb0a04691588e6c6dd300b76bb21f635baadaad

    • SHA256

      345e2079dbfff1b00d5f13dc881b21383ab1d15e36739ac951df51dc0fa4f835

    • SHA512

      f2a5e867578de904e1fd5e1f52230ea4b812bbc5deff0ef9a036150809aa9d271b679f67d54ee240d98cc974884e5854cc66cd8e1013c24dcf0d701509d38b2b

    • SSDEEP

      98304:xTeyCFQywfwd3PquhdAl5a8Sgyr3XtM9jrU9ruoZ8D92JaXUz8+GCRbBxWQw:xqy+x5P5dK5HSgQX+9jrU1uoCB2JwSRI

    Score
    10/10
    xmrigevasionminer

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Stops running service(s)

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks