Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

40bac9768a...0N.exe

windows7-x64

10

40bac9768a...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    40bac9768abe69cbffa5c1df536d2400N.exe

  • Size

    1.9MB

  • Sample

    240803-dsdbfa1fnr

  • MD5

    40bac9768abe69cbffa5c1df536d2400

  • SHA1

    9c92d45b84ae676ec7c389b65c0e9742f2467a61

  • SHA256

    32d4594559ffe2393a482116e4883ccd4dbf340894cf0418b297848c85c3c819

  • SHA512

    2e99462b953e71a568c2c7cfa858d56144187f7fd37057f10e6b14f81c9effce235dd91625d79cd3d5eef6198dd0b6e014cb31f4446eb9517777896d5dba2af8

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pCB2lUj:NABW

Score
10/10
xmrigexecutionminerpersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      40bac9768abe69cbffa5c1df536d2400N.exe

    • Size

      1.9MB

    • MD5

      40bac9768abe69cbffa5c1df536d2400

    • SHA1

      9c92d45b84ae676ec7c389b65c0e9742f2467a61

    • SHA256

      32d4594559ffe2393a482116e4883ccd4dbf340894cf0418b297848c85c3c819

    • SHA512

      2e99462b953e71a568c2c7cfa858d56144187f7fd37057f10e6b14f81c9effce235dd91625d79cd3d5eef6198dd0b6e014cb31f4446eb9517777896d5dba2af8

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pCB2lUj:NABW

    Score
    10/10
    xmrigexecutionminerpersistenceprivilege_escalationupx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Blocklisted process makes network request

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

      execution

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks