Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    virussign.com_3ec5526153daf29fe95a8fefbd0d2f60.vir

  • Size

    2.4MB

  • Sample

    240528-tr9k9abe6z

  • MD5

    3ec5526153daf29fe95a8fefbd0d2f60

  • SHA1

    c4ee57a6b61ec2660e7a4b7b33854e14599d6ce2

  • SHA256

    d1b4c012402c10c58e979b4fa3c39a9ca50bdfc223982c9830bf5f1ae63d9768

  • SHA512

    d7a7de180dc6b5ce634ef62a8d6bc1ee62a6905c9b30153a208ea24a7db6a5f296c94e582b6ff7891184ed36b53d67f3048cdb5f8f869812b8915bcd0ea00c11

  • SSDEEP

    49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6tdlmU1/eoQ:BemTLkNdfE0pZrwu

Malware Config

Targets

    • Target

      virussign.com_3ec5526153daf29fe95a8fefbd0d2f60.vir

    • Size

      2.4MB

    • MD5

      3ec5526153daf29fe95a8fefbd0d2f60

    • SHA1

      c4ee57a6b61ec2660e7a4b7b33854e14599d6ce2

    • SHA256

      d1b4c012402c10c58e979b4fa3c39a9ca50bdfc223982c9830bf5f1ae63d9768

    • SHA512

      d7a7de180dc6b5ce634ef62a8d6bc1ee62a6905c9b30153a208ea24a7db6a5f296c94e582b6ff7891184ed36b53d67f3048cdb5f8f869812b8915bcd0ea00c11

    • SSDEEP

      49152:BezaTF8FcNkNdfE0pZ9ozt4wIC5aIwC+Agr6tdlmU1/eoQ:BemTLkNdfE0pZrwu

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

    • KPOT Core Executable

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Modifies Installed Components in the registry

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks