Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Mineralbeta.exe

  • Size

    787KB

  • Sample

    240722-trs89swdlg

  • MD5

    2b8184c9f54622a72211d4c17dba88d5

  • SHA1

    644e3e459e12d86e932f2e7a96fe98ae0d0fa547

  • SHA256

    195faded7aeb9b795f55063d2f83d1d429938ecd14a8bf10c39b6d07c202c6a7

  • SHA512

    18b3e8d2628c1fb468b761bb099f9cc38c709dc05121ebb2275ec2670c0b05aa858fdb39f4104615cb7d8635068bf24965064f966955a50a8d7c216ba71b0b8f

  • SSDEEP

    12288:5M1mdfEgLo2HAy4A456SoHlMj5I8TFy2dsFCHtBtoi12U0:5M1md8g8gAyjSoHlMj5noa1

Score
7/10

Malware Config

Targets

    • Target

      Mineralbeta.exe

    • Size

      787KB

    • MD5

      2b8184c9f54622a72211d4c17dba88d5

    • SHA1

      644e3e459e12d86e932f2e7a96fe98ae0d0fa547

    • SHA256

      195faded7aeb9b795f55063d2f83d1d429938ecd14a8bf10c39b6d07c202c6a7

    • SHA512

      18b3e8d2628c1fb468b761bb099f9cc38c709dc05121ebb2275ec2670c0b05aa858fdb39f4104615cb7d8635068bf24965064f966955a50a8d7c216ba71b0b8f

    • SSDEEP

      12288:5M1mdfEgLo2HAy4A456SoHlMj5I8TFy2dsFCHtBtoi12U0:5M1md8g8gAyjSoHlMj5noa1

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks