Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    262329e4daa2ab894594ddc2ed081db26300a07dcd6a4a535fbda00c7de903df

  • Size

    1.9MB

  • Sample

    240801-1c3mqa1dpf

  • MD5

    c52dd368843ccea831f5626d175479e1

  • SHA1

    a6177ebf269f582fcd77866cb6109e48cfe3fd8d

  • SHA256

    262329e4daa2ab894594ddc2ed081db26300a07dcd6a4a535fbda00c7de903df

  • SHA512

    eb6d14ff50020c6fc4f12ff4d9e98abb3a9afa9f3f01e127812f243098913b60c9fe746b99a1540780aa4b221526a5e5109674b7635c5dbfd7322d6c54cb02e4

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkFfkeMlNIZbElhzBXeCn0nrIYbcqhmYaMGLUgO5nfg:Lz071uv4BPMkFfdgIZohteb5cTY2nXT

Malware Config

Targets

    • Target

      262329e4daa2ab894594ddc2ed081db26300a07dcd6a4a535fbda00c7de903df

    • Size

      1.9MB

    • MD5

      c52dd368843ccea831f5626d175479e1

    • SHA1

      a6177ebf269f582fcd77866cb6109e48cfe3fd8d

    • SHA256

      262329e4daa2ab894594ddc2ed081db26300a07dcd6a4a535fbda00c7de903df

    • SHA512

      eb6d14ff50020c6fc4f12ff4d9e98abb3a9afa9f3f01e127812f243098913b60c9fe746b99a1540780aa4b221526a5e5109674b7635c5dbfd7322d6c54cb02e4

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkFfkeMlNIZbElhzBXeCn0nrIYbcqhmYaMGLUgO5nfg:Lz071uv4BPMkFfdgIZohteb5cTY2nXT

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks