Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    907f885bdb9c0a3dfbdba89f7428d319ef6c0cbc741eeec226c9aafd4afe7cab

  • Size

    1.6MB

  • Sample

    240610-r3ya9azgrk

  • MD5

    72b75b43506e9cd665e4939b42c22a42

  • SHA1

    10c0ac496629baefc911623bcfe3091e5c8d28ea

  • SHA256

    907f885bdb9c0a3dfbdba89f7428d319ef6c0cbc741eeec226c9aafd4afe7cab

  • SHA512

    e42761f1e036c04222c2c2fac20d31fde3d4c4d0fdc3b843e93c1a25e1630614c1cb2427a5d89ac3cf727a8ca42ae7a33ff8744252466d9d75c086ebe78dd552

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjFkTVnfuDPFFWqreoY58SiAO+9rUGD4:Lz071uv4BPMkHC0IEFToChvLq

Malware Config

Targets

    • Target

      907f885bdb9c0a3dfbdba89f7428d319ef6c0cbc741eeec226c9aafd4afe7cab

    • Size

      1.6MB

    • MD5

      72b75b43506e9cd665e4939b42c22a42

    • SHA1

      10c0ac496629baefc911623bcfe3091e5c8d28ea

    • SHA256

      907f885bdb9c0a3dfbdba89f7428d319ef6c0cbc741eeec226c9aafd4afe7cab

    • SHA512

      e42761f1e036c04222c2c2fac20d31fde3d4c4d0fdc3b843e93c1a25e1630614c1cb2427a5d89ac3cf727a8ca42ae7a33ff8744252466d9d75c086ebe78dd552

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvjFkTVnfuDPFFWqreoY58SiAO+9rUGD4:Lz071uv4BPMkHC0IEFToChvLq

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • Detects executables containing URLs to raw contents of a Github gist

    • UPX dump on OEP (original entry point)

    • XMRig Miner payload

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks