Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
file.ps1
-
Size
148B
-
Sample
240705-baa29aybnr
-
MD5
3ac844b877daa7a993d3881f95a5c5b7
-
SHA1
1b8bc001445332a6566ec0f2d74391c073d8aedc
-
SHA256
8af9f59828228fc1c549acdd3d61c5b218ab7b7e37ac7ef5e383a7da4f3a3dfe
-
SHA512
ea14f48f0ad9730d0143328af4b824452d4d5e6aa67af2d4f86a0f4f2cb0883295bc6fd94f2d30c726e1e44bf5ce6fccca43dae201d8932e765a3cdc634b0d1e
Static task
static1
Behavioral task
behavioral1
Sample
file.ps1
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
file.ps1
Resource
win10v2004-20240508-en
Malware Config
Extracted
http://185.254.97.190:2024/test.txt
Extracted
https://raw.githubusercontent.com/MoneroOcean/xmrig_setup/master/xmrig.zip
Extracted
https://raw.githubusercontent.com/MoneroOcean/xmrig_setup/master/nssm.zip
Targets
-
-
Target
file.ps1
-
Size
148B
-
MD5
3ac844b877daa7a993d3881f95a5c5b7
-
SHA1
1b8bc001445332a6566ec0f2d74391c073d8aedc
-
SHA256
8af9f59828228fc1c549acdd3d61c5b218ab7b7e37ac7ef5e383a7da4f3a3dfe
-
SHA512
ea14f48f0ad9730d0143328af4b824452d4d5e6aa67af2d4f86a0f4f2cb0883295bc6fd94f2d30c726e1e44bf5ce6fccca43dae201d8932e765a3cdc634b0d1e
-
XMRig Miner payload
-
Blocklisted process makes network request
-
Executes dropped EXE
-
Legitimate hosting services abused for malware hosting/C2
-