Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

0aa920ecef...0c2a78

ubuntu-18.04-amd64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0aa920ecef233dce94895ad1e258fa70855fbac8596d862e9a8266bb600c2a78

  • Size

    32KB

  • Sample

    240509-hae5jahc78

  • MD5

    2aee6dc8e5f8a6aeef78bd93cdbcd9b4

  • SHA1

    98e3b6ce5b05a97a2b6c77a88f61f1a1f3d891f4

  • SHA256

    0aa920ecef233dce94895ad1e258fa70855fbac8596d862e9a8266bb600c2a78

  • SHA512

    de16183d16974d531fb123fb1c4065b7668cd554cf6ef48588d970e0562440164b9bc55dbe64c424ebf5798c2513d75d6dcaf8fa72d5ffa902ec7c7202e71531

  • SSDEEP

    768:Dycp0iv+wlXrvIH+tBl+fnN5FRS2R/tX/NU38QV:m5ANmH+tB47DnRha38QV

Score
10/10
xmrig_linuxevasionlinuxminerrootkit

Malware Config

Targets

    • Target

      0aa920ecef233dce94895ad1e258fa70855fbac8596d862e9a8266bb600c2a78

    • Size

      32KB

    • MD5

      2aee6dc8e5f8a6aeef78bd93cdbcd9b4

    • SHA1

      98e3b6ce5b05a97a2b6c77a88f61f1a1f3d891f4

    • SHA256

      0aa920ecef233dce94895ad1e258fa70855fbac8596d862e9a8266bb600c2a78

    • SHA512

      de16183d16974d531fb123fb1c4065b7668cd554cf6ef48588d970e0562440164b9bc55dbe64c424ebf5798c2513d75d6dcaf8fa72d5ffa902ec7c7202e71531

    • SSDEEP

      768:Dycp0iv+wlXrvIH+tBl+fnN5FRS2R/tX/NU38QV:m5ANmH+tB47DnRha38QV

    Score
    10/10
    xmrig_linuxevasionminerrootkit

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig_linux

    • Deletes system logs

      Deletes log file which contains global system messages. Adversaries may delete system logs to minimize their footprint.

      evasion

    • Loads a kernel module

      Loads a Linux kernel module, potentially to achieve persistence

      rootkit

    • Deletes log files

      Deletes log files on the system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Reads list of loaded kernel modules

      Reads the list of currently loaded kernel modules, possibly to detect virtual environments.

      evasion
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.