Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
1172a8b8cb6975d716b1f133462c2a8506e17f142c95ca220f4ffe066229f2a8
-
Size
9.0MB
-
Sample
240614-nyr2wstamr
-
MD5
6b4f06f6c6c73a1d56c5a66be8306541
-
SHA1
2af7e6175abe6f102520b61a92e03990c80cc2f4
-
SHA256
1172a8b8cb6975d716b1f133462c2a8506e17f142c95ca220f4ffe066229f2a8
-
SHA512
fda4c6bde698c62c66f6e8023f1cdd84b7fca99c19f8c02882045d19ba983e7a9a0223f6ffbebbe2d8ffb363b02f437f550413cb16bdff110d4da3e09e0b0ed2
-
SSDEEP
196608:rhHMBGC3PtXtT+Was8+wq1wo9JoYx5JAMdJOnZTG1IvQSaKe6NZOn:r2G0vwuwasMdJOnZKVSaaNZOn
Static task
static1
Behavioral task
behavioral1
Sample
1172a8b8cb6975d716b1f133462c2a8506e17f142c95ca220f4ffe066229f2a8.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral2
Sample
1172a8b8cb6975d716b1f133462c2a8506e17f142c95ca220f4ffe066229f2a8.exe
Resource
win11-20240508-en
Malware Config
Targets
-
-
Target
1172a8b8cb6975d716b1f133462c2a8506e17f142c95ca220f4ffe066229f2a8
-
Size
9.0MB
-
MD5
6b4f06f6c6c73a1d56c5a66be8306541
-
SHA1
2af7e6175abe6f102520b61a92e03990c80cc2f4
-
SHA256
1172a8b8cb6975d716b1f133462c2a8506e17f142c95ca220f4ffe066229f2a8
-
SHA512
fda4c6bde698c62c66f6e8023f1cdd84b7fca99c19f8c02882045d19ba983e7a9a0223f6ffbebbe2d8ffb363b02f437f550413cb16bdff110d4da3e09e0b0ed2
-
SSDEEP
196608:rhHMBGC3PtXtT+Was8+wq1wo9JoYx5JAMdJOnZTG1IvQSaKe6NZOn:r2G0vwuwasMdJOnZKVSaaNZOn
Score10/10-
XMRig Miner payload
-
Executes dropped EXE
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1