Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    9d515a52c528739d33b9be76081d02d0N.exe

  • Size

    2.3MB

  • Sample

    240806-nv8v8ssbpg

  • MD5

    9d515a52c528739d33b9be76081d02d0

  • SHA1

    42aff2329d2518b211ba230d35f1e55d1f6d0257

  • SHA256

    842423aaa4bf01ec9b4bbd0704f9bf41072e90032417a3cae3aa2431aab1c983

  • SHA512

    26c52b9e13aaea6d82f63193aef530ab141aa4288f59c5ff57b7f5b6f2fd8afaa471fbe97cb576765fcb9bc713af49b9ea17b0b2e03bbb170db3c54a4b06cff6

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTleWCw:NABn

Malware Config

Targets

    • Target

      9d515a52c528739d33b9be76081d02d0N.exe

    • Size

      2.3MB

    • MD5

      9d515a52c528739d33b9be76081d02d0

    • SHA1

      42aff2329d2518b211ba230d35f1e55d1f6d0257

    • SHA256

      842423aaa4bf01ec9b4bbd0704f9bf41072e90032417a3cae3aa2431aab1c983

    • SHA512

      26c52b9e13aaea6d82f63193aef530ab141aa4288f59c5ff57b7f5b6f2fd8afaa471fbe97cb576765fcb9bc713af49b9ea17b0b2e03bbb170db3c54a4b06cff6

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTleWCw:NABn

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Blocklisted process makes network request

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks