Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    9ec6e2b5b183f454415c0ed222fe9537760e615fa9ee5e95fb098157a8d15637

  • Size

    2.6MB

  • Sample

    240315-192fxsec63

  • MD5

    9dd3f236f36d397f0f80004952e1791d

  • SHA1

    63b8dc2958ea5387b67a38f19be91c055832fe42

  • SHA256

    9ec6e2b5b183f454415c0ed222fe9537760e615fa9ee5e95fb098157a8d15637

  • SHA512

    ceb07c0558f383702f4f0048e7f01572f3e31b1a69029b36f03dd440ff0d90d597c991724fa9c54bfe8556293f667577393df81b81337a0d5a7b4376cb417a54

  • SSDEEP

    49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hjGhql0lQO:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2RR

Score
10/10

Malware Config

Targets

    • Target

      9ec6e2b5b183f454415c0ed222fe9537760e615fa9ee5e95fb098157a8d15637

    • Size

      2.6MB

    • MD5

      9dd3f236f36d397f0f80004952e1791d

    • SHA1

      63b8dc2958ea5387b67a38f19be91c055832fe42

    • SHA256

      9ec6e2b5b183f454415c0ed222fe9537760e615fa9ee5e95fb098157a8d15637

    • SHA512

      ceb07c0558f383702f4f0048e7f01572f3e31b1a69029b36f03dd440ff0d90d597c991724fa9c54bfe8556293f667577393df81b81337a0d5a7b4376cb417a54

    • SSDEEP

      49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hjGhql0lQO:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2RR

    Score
    10/10
    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • Detects executables containing URLs to raw contents of a Github gist

    • UPX dump on OEP (original entry point)

    • XMRig Miner payload

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks