Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

028cde6b4b...18.exe

windows7-x64

10

028cde6b4b...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    028cde6b4be81c4984cc92d357405e69_JaffaCakes118

  • Size

    2.1MB

  • Sample

    240427-gdb2lsda6w

  • MD5

    028cde6b4be81c4984cc92d357405e69

  • SHA1

    a387a9cd8535b8b85917d15bed0a2be260f84caa

  • SHA256

    077dd945cbde3624ffba94bf0b6e7d48d2b32e9482842ef5be598dbff9c11071

  • SHA512

    2b3a9ab76b45006bf52b7676bf4ab3b1632fa1d17d04cfdf2856ff06eac1a6e2f85b9b9ac9a5c65e10fcab983e305cd4175ac51deb881003b64680ebb5ea2732

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VQx7Va4qri:NABz

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      028cde6b4be81c4984cc92d357405e69_JaffaCakes118

    • Size

      2.1MB

    • MD5

      028cde6b4be81c4984cc92d357405e69

    • SHA1

      a387a9cd8535b8b85917d15bed0a2be260f84caa

    • SHA256

      077dd945cbde3624ffba94bf0b6e7d48d2b32e9482842ef5be598dbff9c11071

    • SHA512

      2b3a9ab76b45006bf52b7676bf4ab3b1632fa1d17d04cfdf2856ff06eac1a6e2f85b9b9ac9a5c65e10fcab983e305cd4175ac51deb881003b64680ebb5ea2732

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VQx7Va4qri:NABz

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks