Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f4b4e66cf1ee82c25736af0c30798a265b8f93a2605387a06c385c44e7dc8959

  • Size

    3.2MB

  • Sample

    240429-eh6qnshd87

  • MD5

    4801c8926d5448d297f40c3a8b08ab33

  • SHA1

    955ef46fd410067d6097f5f0667c87fdd65f2ca2

  • SHA256

    f4b4e66cf1ee82c25736af0c30798a265b8f93a2605387a06c385c44e7dc8959

  • SHA512

    e3bf59b6f05419e7d1ce5c93f154b64a4be16595b8aebbef17e0f6cb00bed92f350bba836e4400697389ae9a030ff87c7157145b2ce3292fa4f73731a5ee18af

  • SSDEEP

    98304:N0GnJMOWPClFdx6e0EALKWVTffZiPAcRq6jHjc44:NFWPClFo

Score
10/10

Malware Config

Targets

    • Target

      f4b4e66cf1ee82c25736af0c30798a265b8f93a2605387a06c385c44e7dc8959

    • Size

      3.2MB

    • MD5

      4801c8926d5448d297f40c3a8b08ab33

    • SHA1

      955ef46fd410067d6097f5f0667c87fdd65f2ca2

    • SHA256

      f4b4e66cf1ee82c25736af0c30798a265b8f93a2605387a06c385c44e7dc8959

    • SHA512

      e3bf59b6f05419e7d1ce5c93f154b64a4be16595b8aebbef17e0f6cb00bed92f350bba836e4400697389ae9a030ff87c7157145b2ce3292fa4f73731a5ee18af

    • SSDEEP

      98304:N0GnJMOWPClFdx6e0EALKWVTffZiPAcRq6jHjc44:NFWPClFo

    Score
    10/10
    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • UPX dump on OEP (original entry point)

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks