Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3487b92908f44a730c8a9be78382ddce7cc15eadafa8de06c5d7283ebec19a85

  • Size

    3.9MB

  • Sample

    240708-zx3yjs1ekf

  • MD5

    c448f464ff2d4493a627f791b7542fd2

  • SHA1

    2720fbb7d8625b5598d5ec3b714ad90645f21e92

  • SHA256

    3487b92908f44a730c8a9be78382ddce7cc15eadafa8de06c5d7283ebec19a85

  • SHA512

    2079c215baa8600f3775bca03916d561566c71f3475554d8b1538068ca6362425533bae92a35608f4d494c6c8c485f52dc46fc8f416f0bcedf610a60b731317e

  • SSDEEP

    98304:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWt:SbBeSFkp

Malware Config

Targets

    • Target

      3487b92908f44a730c8a9be78382ddce7cc15eadafa8de06c5d7283ebec19a85

    • Size

      3.9MB

    • MD5

      c448f464ff2d4493a627f791b7542fd2

    • SHA1

      2720fbb7d8625b5598d5ec3b714ad90645f21e92

    • SHA256

      3487b92908f44a730c8a9be78382ddce7cc15eadafa8de06c5d7283ebec19a85

    • SHA512

      2079c215baa8600f3775bca03916d561566c71f3475554d8b1538068ca6362425533bae92a35608f4d494c6c8c485f52dc46fc8f416f0bcedf610a60b731317e

    • SSDEEP

      98304:S1ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWt:SbBeSFkp

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Blocklisted process makes network request

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks