Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

05322ddd93...18.exe

windows7-x64

10

05322ddd93...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    05322ddd930755aa1fd8024095bab90e_JaffaCakes118

  • Size

    1.7MB

  • Sample

    240728-b7gw3athrh

  • MD5

    05322ddd930755aa1fd8024095bab90e

  • SHA1

    a75e7a4cab4fc592cf6536743c41c2d3b7e9a76e

  • SHA256

    e398bcf19b32e401d2aa1a2db5b72e1ca87d486f854dd75f0366e0cd6478f8c5

  • SHA512

    905b09cb62434b73cb7026925909d2387905ab7d8cca125f9f20bd6dc1ff5e35534775de8a40ac018891b1860218f01d61e6ab557877d49fb19b35a1f9e8e505

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pXeu+:NABm

Score
10/10
xmrigexecutionminerupx

Malware Config

Targets

    • Target

      05322ddd930755aa1fd8024095bab90e_JaffaCakes118

    • Size

      1.7MB

    • MD5

      05322ddd930755aa1fd8024095bab90e

    • SHA1

      a75e7a4cab4fc592cf6536743c41c2d3b7e9a76e

    • SHA256

      e398bcf19b32e401d2aa1a2db5b72e1ca87d486f854dd75f0366e0cd6478f8c5

    • SHA512

      905b09cb62434b73cb7026925909d2387905ab7d8cca125f9f20bd6dc1ff5e35534775de8a40ac018891b1860218f01d61e6ab557877d49fb19b35a1f9e8e505

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pXeu+:NABm

    Score
    10/10
    xmrigexecutionminerupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

      execution

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks