Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    215f0dfecd789d8d2f83420bffe027a0.exe

  • Size

    1.9MB

  • Sample

    240706-ayymsashnb

  • MD5

    215f0dfecd789d8d2f83420bffe027a0

  • SHA1

    2795d198a39df023bbf06829b4f7ba1e579d8548

  • SHA256

    568f975169b671e932afc33e7cac001007dd62730feed617ba84308693d67411

  • SHA512

    5d7bf462f988a51251b1c59b9a850cccfd6a05ed74e7eb67d1a480ad0ffe5a1496dc9823accd71e7cb676e4a4a11341dd558fd424ac3d5f575d51aec24c1ee9b

  • SSDEEP

    49152:Lz071uv4BPMkyW10/w16BvZX71Fq8++fAYUHK5:NABm

Malware Config

Targets

    • Target

      215f0dfecd789d8d2f83420bffe027a0.exe

    • Size

      1.9MB

    • MD5

      215f0dfecd789d8d2f83420bffe027a0

    • SHA1

      2795d198a39df023bbf06829b4f7ba1e579d8548

    • SHA256

      568f975169b671e932afc33e7cac001007dd62730feed617ba84308693d67411

    • SHA512

      5d7bf462f988a51251b1c59b9a850cccfd6a05ed74e7eb67d1a480ad0ffe5a1496dc9823accd71e7cb676e4a4a11341dd558fd424ac3d5f575d51aec24c1ee9b

    • SSDEEP

      49152:Lz071uv4BPMkyW10/w16BvZX71Fq8++fAYUHK5:NABm

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks