Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    06a33ef38416f028f5a84405d64c0f1acc5314f5ae8ad340e21a606a36b00066

  • Size

    3.6MB

  • Sample

    240726-wzc85azbnc

  • MD5

    b62db2fad60a697423fe6c95a6404d2c

  • SHA1

    460ef2e4c06328a92c3b1f634e17a493baba594a

  • SHA256

    06a33ef38416f028f5a84405d64c0f1acc5314f5ae8ad340e21a606a36b00066

  • SHA512

    db3a7cbbe1de6f65ec5a4a96cf976b024e1454ea29646db73c8821bebd9777a8247646cd61ef2c0960cc038238f0b4c107fd199832e28aea99f1964967e99f8f

  • SSDEEP

    98304:71ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWM:7bBeSFkg

Malware Config

Targets

    • Target

      06a33ef38416f028f5a84405d64c0f1acc5314f5ae8ad340e21a606a36b00066

    • Size

      3.6MB

    • MD5

      b62db2fad60a697423fe6c95a6404d2c

    • SHA1

      460ef2e4c06328a92c3b1f634e17a493baba594a

    • SHA256

      06a33ef38416f028f5a84405d64c0f1acc5314f5ae8ad340e21a606a36b00066

    • SHA512

      db3a7cbbe1de6f65ec5a4a96cf976b024e1454ea29646db73c8821bebd9777a8247646cd61ef2c0960cc038238f0b4c107fd199832e28aea99f1964967e99f8f

    • SSDEEP

      98304:71ONtyBeSFkXV1etEKLlWUTOfeiRA2R76zHrWM:7bBeSFkg

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Blocklisted process makes network request

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks