Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

093f04fb73...46.exe

windows7-x64

10

093f04fb73...46.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    093f04fb7385068f8e73e5d0bce7f6e548080bc0bffa4de5c3a5894148c52a46

  • Size

    2.7MB

  • Sample

    240416-xdsblahf37

  • MD5

    413e5ae63e95202420db36924763c505

  • SHA1

    a73f48d06cbae1fe920c8787b99e3eb4a5e94906

  • SHA256

    093f04fb7385068f8e73e5d0bce7f6e548080bc0bffa4de5c3a5894148c52a46

  • SHA512

    391f2c45b973c6afa347d36b7cb5d08f59d61cc631eb52c5e75a94865f08f4eb03e534b0d66fe0c60d66c4fad4ad0c496dff9d63f9db87f0dc13e67166d842b8

  • SSDEEP

    49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzcCNfeT5J0aXiJvS:N0GnJMOWPClFdx6e0EALKWVTffZiPAcE

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      093f04fb7385068f8e73e5d0bce7f6e548080bc0bffa4de5c3a5894148c52a46

    • Size

      2.7MB

    • MD5

      413e5ae63e95202420db36924763c505

    • SHA1

      a73f48d06cbae1fe920c8787b99e3eb4a5e94906

    • SHA256

      093f04fb7385068f8e73e5d0bce7f6e548080bc0bffa4de5c3a5894148c52a46

    • SHA512

      391f2c45b973c6afa347d36b7cb5d08f59d61cc631eb52c5e75a94865f08f4eb03e534b0d66fe0c60d66c4fad4ad0c496dff9d63f9db87f0dc13e67166d842b8

    • SSDEEP

      49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzcCNfeT5J0aXiJvS:N0GnJMOWPClFdx6e0EALKWVTffZiPAcE

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • UPX dump on OEP (original entry point)

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks