Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2073c3c663...0N.exe

windows7-x64

10

2073c3c663...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2073c3c663c49621a85d15b7c79da420N.exe

  • Size

    1.5MB

  • Sample

    240726-r9rgaavbjp

  • MD5

    2073c3c663c49621a85d15b7c79da420

  • SHA1

    cf3ab224f0b76684841250333b22f567135cf8c8

  • SHA256

    be754d07eddbeb2381c2de36e8e7d2494d8a577f470835b6f1906a821d0001b3

  • SHA512

    4c8049bfe383af8e517c74be10f759b34ced7c98367d92e445c59aa8a9005882cc620058abdc5a15b1478d37e2665f89b78df1c9de7e4b2a304d9df15959bec3

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkyW1HU/ek5Q1szp5NnNvZrV5GgCzxcMf8SZPviLoIo:Lz071uv4BPMkyW10/w16BWgac2zco

Score
10/10
xmrigexecutionminerupx

Malware Config

Targets

    • Target

      2073c3c663c49621a85d15b7c79da420N.exe

    • Size

      1.5MB

    • MD5

      2073c3c663c49621a85d15b7c79da420

    • SHA1

      cf3ab224f0b76684841250333b22f567135cf8c8

    • SHA256

      be754d07eddbeb2381c2de36e8e7d2494d8a577f470835b6f1906a821d0001b3

    • SHA512

      4c8049bfe383af8e517c74be10f759b34ced7c98367d92e445c59aa8a9005882cc620058abdc5a15b1478d37e2665f89b78df1c9de7e4b2a304d9df15959bec3

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkyW1HU/ek5Q1szp5NnNvZrV5GgCzxcMf8SZPviLoIo:Lz071uv4BPMkyW10/w16BWgac2zco

    Score
    10/10
    xmrigexecutionminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

      execution

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks