Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

004bdee383...01.exe

windows7-x64

10

004bdee383...01.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    004bdee3830126f61669eca400efe0f8bf4891a53936ae19f379e11cc5f0e601

  • Size

    2.6MB

  • Sample

    240329-vmcldsdf95

  • MD5

    956af77c77829e310456d22737e01bce

  • SHA1

    5fa0a26e428f36fd05db5801d478d6431bb9e23a

  • SHA256

    004bdee3830126f61669eca400efe0f8bf4891a53936ae19f379e11cc5f0e601

  • SHA512

    21af5141b99268588c7ea33ad15802438e9cf7271c5237868cb4092a3ebba791da22eb04098b99ade8376a161947f30c4c21765387f406f37648d6ec2506dd64

  • SSDEEP

    49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzJh516Q+o4SjQSDq:N0GnJMOWPClFdx6e0EALKWVTffZiPAci

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      004bdee3830126f61669eca400efe0f8bf4891a53936ae19f379e11cc5f0e601

    • Size

      2.6MB

    • MD5

      956af77c77829e310456d22737e01bce

    • SHA1

      5fa0a26e428f36fd05db5801d478d6431bb9e23a

    • SHA256

      004bdee3830126f61669eca400efe0f8bf4891a53936ae19f379e11cc5f0e601

    • SHA512

      21af5141b99268588c7ea33ad15802438e9cf7271c5237868cb4092a3ebba791da22eb04098b99ade8376a161947f30c4c21765387f406f37648d6ec2506dd64

    • SSDEEP

      49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzJh516Q+o4SjQSDq:N0GnJMOWPClFdx6e0EALKWVTffZiPAci

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • UPX dump on OEP (original entry point)

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks