Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

f9c47b17be...aa.exe

windows7-x64

10

f9c47b17be...aa.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f9c47b17befe38634891e449b3ba53fcf850a147b9649816d436b41aee8282aa

  • Size

    2.5MB

  • Sample

    240309-arxrxaaf24

  • MD5

    2518d81d928e5f98ce85345d490d7560

  • SHA1

    20e22de9d817680a6ce3437ca83e956701fa6cdb

  • SHA256

    f9c47b17befe38634891e449b3ba53fcf850a147b9649816d436b41aee8282aa

  • SHA512

    29be16a10f63eb6cab0c5aa4fb213416ccaa9442ea13f2e173df1dc42d5bacadd3ad08bc87b440d8f7f95903a2f97598b4290728ac8cea114c5f4047751c2a7e

  • SSDEEP

    49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzHUrMAX/:N0GnJMOWPClFdx6e0EALKWVTffZiPAcW

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      f9c47b17befe38634891e449b3ba53fcf850a147b9649816d436b41aee8282aa

    • Size

      2.5MB

    • MD5

      2518d81d928e5f98ce85345d490d7560

    • SHA1

      20e22de9d817680a6ce3437ca83e956701fa6cdb

    • SHA256

      f9c47b17befe38634891e449b3ba53fcf850a147b9649816d436b41aee8282aa

    • SHA512

      29be16a10f63eb6cab0c5aa4fb213416ccaa9442ea13f2e173df1dc42d5bacadd3ad08bc87b440d8f7f95903a2f97598b4290728ac8cea114c5f4047751c2a7e

    • SSDEEP

      49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzHUrMAX/:N0GnJMOWPClFdx6e0EALKWVTffZiPAcW

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • UPX dump on OEP (original entry point)

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks