Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2073c3c663c49621a85d15b7c79da420N.exe

  • Size

    1.5MB

  • Sample

    240726-r9rgaavbjp

  • MD5

    2073c3c663c49621a85d15b7c79da420

  • SHA1

    cf3ab224f0b76684841250333b22f567135cf8c8

  • SHA256

    be754d07eddbeb2381c2de36e8e7d2494d8a577f470835b6f1906a821d0001b3

  • SHA512

    4c8049bfe383af8e517c74be10f759b34ced7c98367d92e445c59aa8a9005882cc620058abdc5a15b1478d37e2665f89b78df1c9de7e4b2a304d9df15959bec3

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkyW1HU/ek5Q1szp5NnNvZrV5GgCzxcMf8SZPviLoIo:Lz071uv4BPMkyW10/w16BWgac2zco

Malware Config

Targets

    • Target

      2073c3c663c49621a85d15b7c79da420N.exe

    • Size

      1.5MB

    • MD5

      2073c3c663c49621a85d15b7c79da420

    • SHA1

      cf3ab224f0b76684841250333b22f567135cf8c8

    • SHA256

      be754d07eddbeb2381c2de36e8e7d2494d8a577f470835b6f1906a821d0001b3

    • SHA512

      4c8049bfe383af8e517c74be10f759b34ced7c98367d92e445c59aa8a9005882cc620058abdc5a15b1478d37e2665f89b78df1c9de7e4b2a304d9df15959bec3

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkyW1HU/ek5Q1szp5NnNvZrV5GgCzxcMf8SZPviLoIo:Lz071uv4BPMkyW10/w16BWgac2zco

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Blocklisted process makes network request

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks