Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    05ecbb4f6bbcc48d82b3086e3f4d3e9996fcb4e64d084df21aeb5eb7d589e76b.exe

  • Size

    2.6MB

  • Sample

    240614-ykgzwaxckn

  • MD5

    60253a26ce1bcda827664d98a5113936

  • SHA1

    1de336f409a4d963ac8bf1150a495ae32e79fbc0

  • SHA256

    05ecbb4f6bbcc48d82b3086e3f4d3e9996fcb4e64d084df21aeb5eb7d589e76b

  • SHA512

    8d85148719fa619b4cd0c5ded5176d200201ae81827a17f359f8e6e0e8416e1b0410d3320109680acdf3fe744c5373933b0fc045c761b702d6205044cb5642c8

  • SSDEEP

    49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMk+QqGRjj3LJR/Lq:71ONtyBeSFkXV1etEKLlWUTOfeiRA2Rp

Malware Config

Targets

    • Target

      05ecbb4f6bbcc48d82b3086e3f4d3e9996fcb4e64d084df21aeb5eb7d589e76b.exe

    • Size

      2.6MB

    • MD5

      60253a26ce1bcda827664d98a5113936

    • SHA1

      1de336f409a4d963ac8bf1150a495ae32e79fbc0

    • SHA256

      05ecbb4f6bbcc48d82b3086e3f4d3e9996fcb4e64d084df21aeb5eb7d589e76b

    • SHA512

      8d85148719fa619b4cd0c5ded5176d200201ae81827a17f359f8e6e0e8416e1b0410d3320109680acdf3fe744c5373933b0fc045c761b702d6205044cb5642c8

    • SSDEEP

      49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMk+QqGRjj3LJR/Lq:71ONtyBeSFkXV1etEKLlWUTOfeiRA2Rp

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks