Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

038fe46017...18.exe

windows7-x64

10

038fe46017...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    038fe4601734bbe5e88b1a1bcc0becb8_JaffaCakes118

  • Size

    1.9MB

  • Sample

    240427-y97a3afg42

  • MD5

    038fe4601734bbe5e88b1a1bcc0becb8

  • SHA1

    147e42301949e03e435538ba59ff29c19321c308

  • SHA256

    0ad9c0f579a949af6813783ba1296e45914c543a20e7b3554aa52e0f6987eb79

  • SHA512

    8455fafde104834e970adffc48ba5d631ea15154bc506be11f34ca0dd17b90f832f401cd66f56cdc907b2c0f179c4dce74db1d006a48331cf7f9f39712aff1f4

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5KIP7nTrmBhihM5xC+U18:NABl

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      038fe4601734bbe5e88b1a1bcc0becb8_JaffaCakes118

    • Size

      1.9MB

    • MD5

      038fe4601734bbe5e88b1a1bcc0becb8

    • SHA1

      147e42301949e03e435538ba59ff29c19321c308

    • SHA256

      0ad9c0f579a949af6813783ba1296e45914c543a20e7b3554aa52e0f6987eb79

    • SHA512

      8455fafde104834e970adffc48ba5d631ea15154bc506be11f34ca0dd17b90f832f401cd66f56cdc907b2c0f179c4dce74db1d006a48331cf7f9f39712aff1f4

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5KIP7nTrmBhihM5xC+U18:NABl

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks