Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ee1b71d189c2f42dd82fc3ba4329ff8c83e1e6cc5e58f5dc7b8db79d07b5b77a
-
Size
2.6MB
-
Sample
240411-etca7sfb4t
-
MD5
676be144bad2c503294a13d928ee3aa8
-
SHA1
92004ce8e6782d566c9c2417d4003731eacab7a8
-
SHA256
ee1b71d189c2f42dd82fc3ba4329ff8c83e1e6cc5e58f5dc7b8db79d07b5b77a
-
SHA512
1ffb5318172d3466a981aec70e4af00979598601190ffc87542cd32e5e40df89569106683cd1503e5780de36ab747aeb207ef0e1ea16128eb1053c9e5f113e90
-
SSDEEP
49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkHC0IlnASEx/uI3:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2Rm
Behavioral task
behavioral1
Sample
ee1b71d189c2f42dd82fc3ba4329ff8c83e1e6cc5e58f5dc7b8db79d07b5b77a.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
ee1b71d189c2f42dd82fc3ba4329ff8c83e1e6cc5e58f5dc7b8db79d07b5b77a
-
Size
2.6MB
-
MD5
676be144bad2c503294a13d928ee3aa8
-
SHA1
92004ce8e6782d566c9c2417d4003731eacab7a8
-
SHA256
ee1b71d189c2f42dd82fc3ba4329ff8c83e1e6cc5e58f5dc7b8db79d07b5b77a
-
SHA512
1ffb5318172d3466a981aec70e4af00979598601190ffc87542cd32e5e40df89569106683cd1503e5780de36ab747aeb207ef0e1ea16128eb1053c9e5f113e90
-
SSDEEP
49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkHC0IlnASEx/uI3:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2Rm
-
Detects executables containing URLs to raw contents of a Github gist
-
UPX dump on OEP (original entry point)
-
XMRig Miner payload
-
Blocklisted process makes network request
-
Executes dropped EXE
-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-