Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f67746e5bff0fa6d9d578f3c81246ec8af9de4899a6e663daa570f4aa94edf43

  • Size

    1.8MB

  • Sample

    231114-xhg2esec5w

  • MD5

    eb4c372ee43fc2548d6843f3d02c9797

  • SHA1

    fb0b142f8a6167f1be4701727b5e5e622b751bb4

  • SHA256

    f67746e5bff0fa6d9d578f3c81246ec8af9de4899a6e663daa570f4aa94edf43

  • SHA512

    f745531e7656eff40e7fad491e80ecf93288f10f1509a0239372ff0b47da7350bc1ff09a96377a4095d914e06f605a1dab807b25c5bf390b98ce8ee11d8a276f

  • SSDEEP

    49152:XPujn/TJQ1NLlSqrU5tUE1etEtLlWiTHfeiEA2RQ6zHvyRWMzTb/AxoFIO2:XPcn/TJKSb5tN1etEtLlWiTHfeiEA2RJ

Score
10/10

Malware Config

Targets

    • Target

      f67746e5bff0fa6d9d578f3c81246ec8af9de4899a6e663daa570f4aa94edf43

    • Size

      1.8MB

    • MD5

      eb4c372ee43fc2548d6843f3d02c9797

    • SHA1

      fb0b142f8a6167f1be4701727b5e5e622b751bb4

    • SHA256

      f67746e5bff0fa6d9d578f3c81246ec8af9de4899a6e663daa570f4aa94edf43

    • SHA512

      f745531e7656eff40e7fad491e80ecf93288f10f1509a0239372ff0b47da7350bc1ff09a96377a4095d914e06f605a1dab807b25c5bf390b98ce8ee11d8a276f

    • SSDEEP

      49152:XPujn/TJQ1NLlSqrU5tUE1etEtLlWiTHfeiEA2RQ6zHvyRWMzTb/AxoFIO2:XPcn/TJKSb5tN1etEtLlWiTHfeiEA2RJ

    Score
    10/10
    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks