Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2ca85fd72bec980b5e1da8f67b70b870N.exe

  • Size

    1.6MB

  • Sample

    240802-a9jb8s1alb

  • MD5

    2ca85fd72bec980b5e1da8f67b70b870

  • SHA1

    eea198475d9289c8b7e90f101d2273ce070b56f5

  • SHA256

    cf22d37ba0e0a44fac49e89b89388226d6504d8f779023d58215afa4f9e516a0

  • SHA512

    af98b92db3b67ad989ace2a30a1107fa97994f0cf2772b85f01ca3f9a8557e0a1105025b9f92d7f53f98280ec2b3707b46d33ec45ec89e0165ae57cf0e7a1d14

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWY1s38kQu12bPxvyuzaBgJ9pcFtz:Lz071uv4BPMkibTIA5I4TNrpDGF

Malware Config

Targets

    • Target

      2ca85fd72bec980b5e1da8f67b70b870N.exe

    • Size

      1.6MB

    • MD5

      2ca85fd72bec980b5e1da8f67b70b870

    • SHA1

      eea198475d9289c8b7e90f101d2273ce070b56f5

    • SHA256

      cf22d37ba0e0a44fac49e89b89388226d6504d8f779023d58215afa4f9e516a0

    • SHA512

      af98b92db3b67ad989ace2a30a1107fa97994f0cf2772b85f01ca3f9a8557e0a1105025b9f92d7f53f98280ec2b3707b46d33ec45ec89e0165ae57cf0e7a1d14

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWY1s38kQu12bPxvyuzaBgJ9pcFtz:Lz071uv4BPMkibTIA5I4TNrpDGF

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks