Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    03b64265ad3d38dd47de5b5f1ab9ef00N.exe

  • Size

    1.8MB

  • Sample

    240726-nxgvjawakl

  • MD5

    03b64265ad3d38dd47de5b5f1ab9ef00

  • SHA1

    6ece1ad1d44cd8234dceba9249984a43674633e9

  • SHA256

    ade4852ac2f7e0dd2f12ae210580d348f96f093ef95e08024656e644e64d00b1

  • SHA512

    2d79bc21d4f7dd32270fca4ad4abb4850225a29393092ee9af1f6b2d49e50d32b705f19de1acc1800b7495394eb1d45cebdfe0beabca9de0b8b6fccfd6fac945

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VklYxA:NABR

Malware Config

Targets

    • Target

      03b64265ad3d38dd47de5b5f1ab9ef00N.exe

    • Size

      1.8MB

    • MD5

      03b64265ad3d38dd47de5b5f1ab9ef00

    • SHA1

      6ece1ad1d44cd8234dceba9249984a43674633e9

    • SHA256

      ade4852ac2f7e0dd2f12ae210580d348f96f093ef95e08024656e644e64d00b1

    • SHA512

      2d79bc21d4f7dd32270fca4ad4abb4850225a29393092ee9af1f6b2d49e50d32b705f19de1acc1800b7495394eb1d45cebdfe0beabca9de0b8b6fccfd6fac945

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VklYxA:NABR

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks