Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    44fd2dafcc91e4c5e3237c8c79ec73f0.exe

  • Size

    973KB

  • Sample

    240706-fltqyswdjq

  • MD5

    44fd2dafcc91e4c5e3237c8c79ec73f0

  • SHA1

    e6d95a07e70c1bae37e062ec912b3acb0d751fc1

  • SHA256

    6263bfaec3b8579db3d1b6b2081421e0e80f19fe22f637f5d22463b25df73898

  • SHA512

    8fb5300476880e8171fc5b16471d8bf7c1525ab62e0a0793e1aa55faf7c0f37e99ad10246eb61473476279a892404f9bf55431ff7c111470617edf68b747adfb

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PmK/lzapjlRPRWRQJIA:Lz071uv4BPm6l+XPRWdA

Malware Config

Targets

    • Target

      44fd2dafcc91e4c5e3237c8c79ec73f0.exe

    • Size

      973KB

    • MD5

      44fd2dafcc91e4c5e3237c8c79ec73f0

    • SHA1

      e6d95a07e70c1bae37e062ec912b3acb0d751fc1

    • SHA256

      6263bfaec3b8579db3d1b6b2081421e0e80f19fe22f637f5d22463b25df73898

    • SHA512

      8fb5300476880e8171fc5b16471d8bf7c1525ab62e0a0793e1aa55faf7c0f37e99ad10246eb61473476279a892404f9bf55431ff7c111470617edf68b747adfb

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PmK/lzapjlRPRWRQJIA:Lz071uv4BPm6l+XPRWdA

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks