Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

21eefbe8de...f4.exe

windows7-x64

10

21eefbe8de...f4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    21eefbe8de8f516042c448eb0469177b71de43e3e3451908c3050e8462715ff4

  • Size

    1.4MB

  • Sample

    240512-ym3z5agf92

  • MD5

    ad9f499589d416dc194954318d59eb64

  • SHA1

    aeed9a2519282386cb98a4c0cd80b949afe47311

  • SHA256

    21eefbe8de8f516042c448eb0469177b71de43e3e3451908c3050e8462715ff4

  • SHA512

    488fef8759ad46b94a1542b93fc2f2aaf8f47addce3133c2d24228f91c698d830ed166d9ef1a0289bbf7a711c8f9a028012e73d57047c252eb0925783409cfdd

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcmC3f/8lkKJhlsr3Pz00cCZmU:knw9oUUEEDl37jcmWH8SKJhS3X

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      21eefbe8de8f516042c448eb0469177b71de43e3e3451908c3050e8462715ff4

    • Size

      1.4MB

    • MD5

      ad9f499589d416dc194954318d59eb64

    • SHA1

      aeed9a2519282386cb98a4c0cd80b949afe47311

    • SHA256

      21eefbe8de8f516042c448eb0469177b71de43e3e3451908c3050e8462715ff4

    • SHA512

      488fef8759ad46b94a1542b93fc2f2aaf8f47addce3133c2d24228f91c698d830ed166d9ef1a0289bbf7a711c8f9a028012e73d57047c252eb0925783409cfdd

    • SSDEEP

      24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcmC3f/8lkKJhlsr3Pz00cCZmU:knw9oUUEEDl37jcmWH8SKJhS3X

    Score
    10/10
    xmrigminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • UPX dump on OEP (original entry point)

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks