Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    31ea939e5bec3dd9ef05975b779c1660N.exe

  • Size

    1.5MB

  • Sample

    240807-ajz73avenp

  • MD5

    31ea939e5bec3dd9ef05975b779c1660

  • SHA1

    46f7851dddf68d4c923dbaa3898f5c9540fb74bb

  • SHA256

    1b681268707412c99ba16b003d421584fba61fe0d1863766d26058f7962f99fe

  • SHA512

    42558d67f8fc4b6efd5429e5938b70face95c8bdbe4448cd3de8a32ec92580035ff4f4e8de4708bc6c186455fc0d9d7f4517a0aacd5728dc5203d1dd10c11752

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XCejSPept1qA9ny/cpL:knw9oUUEEDlGUrMbtUAgQ

Malware Config

Targets

    • Target

      31ea939e5bec3dd9ef05975b779c1660N.exe

    • Size

      1.5MB

    • MD5

      31ea939e5bec3dd9ef05975b779c1660

    • SHA1

      46f7851dddf68d4c923dbaa3898f5c9540fb74bb

    • SHA256

      1b681268707412c99ba16b003d421584fba61fe0d1863766d26058f7962f99fe

    • SHA512

      42558d67f8fc4b6efd5429e5938b70face95c8bdbe4448cd3de8a32ec92580035ff4f4e8de4708bc6c186455fc0d9d7f4517a0aacd5728dc5203d1dd10c11752

    • SSDEEP

      24576:JanwhSe11QSONCpGJCjETPlGC78XCejSPept1qA9ny/cpL:knw9oUUEEDlGUrMbtUAgQ

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks