Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

ee1b71d189...7a.exe

windows7-x64

10

ee1b71d189...7a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ee1b71d189c2f42dd82fc3ba4329ff8c83e1e6cc5e58f5dc7b8db79d07b5b77a

  • Size

    2.6MB

  • Sample

    240411-etca7sfb4t

  • MD5

    676be144bad2c503294a13d928ee3aa8

  • SHA1

    92004ce8e6782d566c9c2417d4003731eacab7a8

  • SHA256

    ee1b71d189c2f42dd82fc3ba4329ff8c83e1e6cc5e58f5dc7b8db79d07b5b77a

  • SHA512

    1ffb5318172d3466a981aec70e4af00979598601190ffc87542cd32e5e40df89569106683cd1503e5780de36ab747aeb207ef0e1ea16128eb1053c9e5f113e90

  • SSDEEP

    49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkHC0IlnASEx/uI3:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2Rm

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      ee1b71d189c2f42dd82fc3ba4329ff8c83e1e6cc5e58f5dc7b8db79d07b5b77a

    • Size

      2.6MB

    • MD5

      676be144bad2c503294a13d928ee3aa8

    • SHA1

      92004ce8e6782d566c9c2417d4003731eacab7a8

    • SHA256

      ee1b71d189c2f42dd82fc3ba4329ff8c83e1e6cc5e58f5dc7b8db79d07b5b77a

    • SHA512

      1ffb5318172d3466a981aec70e4af00979598601190ffc87542cd32e5e40df89569106683cd1503e5780de36ab747aeb207ef0e1ea16128eb1053c9e5f113e90

    • SSDEEP

      49152:S1G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkHC0IlnASEx/uI3:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2Rm

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Detects executables containing URLs to raw contents of a Github gist

    • UPX dump on OEP (original entry point)

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks