Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file.exe

  • Size

    6.3MB

  • Sample

    240123-mh8t2aabf8

  • MD5

    05a607cfc9ac7c66d4ce77dde0a2e491

  • SHA1

    56101cac6a6d7484b6b131f9dfa6345a9a889423

  • SHA256

    9bee594297039533caa952164d5f121d238d7c4f64cbcb7bd4b50925b66a9bee

  • SHA512

    3c77fe5a61db86b232965a3e2ae6addd9790a193f55d8c5f7ca56a4b4bb7b0431869e1f897557bd6e8995be991db1a6b82c968b8e62d1072dde6816cb347d680

  • SSDEEP

    98304:Eu50YoHGsu/ccnx9xKKPWCLqpcCEQFW7TlfpMarlx+yP/Vc+KOrlzfWmgGi60gMl:TMDu/f9xKWGpcR5lx1RbqSlpigy

Score
10/10
xmrigevasionminer

Malware Config

Targets

    • Target

      file.exe

    • Size

      6.3MB

    • MD5

      05a607cfc9ac7c66d4ce77dde0a2e491

    • SHA1

      56101cac6a6d7484b6b131f9dfa6345a9a889423

    • SHA256

      9bee594297039533caa952164d5f121d238d7c4f64cbcb7bd4b50925b66a9bee

    • SHA512

      3c77fe5a61db86b232965a3e2ae6addd9790a193f55d8c5f7ca56a4b4bb7b0431869e1f897557bd6e8995be991db1a6b82c968b8e62d1072dde6816cb347d680

    • SSDEEP

      98304:Eu50YoHGsu/ccnx9xKKPWCLqpcCEQFW7TlfpMarlx+yP/Vc+KOrlzfWmgGi60gMl:TMDu/f9xKWGpcR5lx1RbqSlpigy

    Score
    10/10
    xmrigevasionminer

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Drops file in Drivers directory

    • Stops running service(s)

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks