Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

c49592a93c...87.exe

windows7-x64

7

c49592a93c...87.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c49592a93ce658399c8fa79b256ce0a1c5b2ca5b4a36ff4f1ff7ab25139a6f87

  • Size

    2.4MB

  • Sample

    240502-dv4amsfd9t

  • MD5

    0f9cdf9b4c45d2b569900a85147b7f3c

  • SHA1

    5930962185dad25382cfc6f65963b75c8c764c83

  • SHA256

    c49592a93ce658399c8fa79b256ce0a1c5b2ca5b4a36ff4f1ff7ab25139a6f87

  • SHA512

    62fa2af58bccfe9d60f7ee94ca07668975b72f5777f7133f9bd4ffe553e798d23237fb008707db12595c1c05d18416560d4669be5d73c46dc99e252d778c143e

  • SSDEEP

    49152:IkRQ6DhMDRZ9IBVL+s0ezJGd80SHMsThF35Hj1Bzu9kRQ6DA:IkRQ6DhMDtIXLr06AdfEThF35Pzu9kRk

Score
10/10
xmrigminerpyinstaller

Malware Config

Targets

    • Target

      c49592a93ce658399c8fa79b256ce0a1c5b2ca5b4a36ff4f1ff7ab25139a6f87

    • Size

      2.4MB

    • MD5

      0f9cdf9b4c45d2b569900a85147b7f3c

    • SHA1

      5930962185dad25382cfc6f65963b75c8c764c83

    • SHA256

      c49592a93ce658399c8fa79b256ce0a1c5b2ca5b4a36ff4f1ff7ab25139a6f87

    • SHA512

      62fa2af58bccfe9d60f7ee94ca07668975b72f5777f7133f9bd4ffe553e798d23237fb008707db12595c1c05d18416560d4669be5d73c46dc99e252d778c143e

    • SSDEEP

      49152:IkRQ6DhMDRZ9IBVL+s0ezJGd80SHMsThF35Hj1Bzu9kRQ6DA:IkRQ6DhMDtIXLr06AdfEThF35Pzu9kRk

    Score
    10/10
    xmrigminerpyinstaller

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks