Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a3a3ac0779f13a95b1fd4ee2ca9933e0N.exe

  • Size

    1.6MB

  • Sample

    240814-etefka1erk

  • MD5

    a3a3ac0779f13a95b1fd4ee2ca9933e0

  • SHA1

    e38cb375f71b481107b0e216e97e070c770d7fd2

  • SHA256

    7e15d6ecb0def0543a4a4f2beb5252a85ef2b3098318a7774d2b98cd5f57b977

  • SHA512

    f22baaccd1b3f58fdd3e965950decbe3bcaa469db901c8a3cd2785428703f505ad7be95fdeac81f0bcd7d1eca975acda0a7fafa437af0d1dec0eaedfecafe06c

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYFR0/l2k1TB1ROTH1thI0dtPP5:Lz071uv4BPMkibTIA5FRo2ktRs1XjZ

Malware Config

Targets

    • Target

      a3a3ac0779f13a95b1fd4ee2ca9933e0N.exe

    • Size

      1.6MB

    • MD5

      a3a3ac0779f13a95b1fd4ee2ca9933e0

    • SHA1

      e38cb375f71b481107b0e216e97e070c770d7fd2

    • SHA256

      7e15d6ecb0def0543a4a4f2beb5252a85ef2b3098318a7774d2b98cd5f57b977

    • SHA512

      f22baaccd1b3f58fdd3e965950decbe3bcaa469db901c8a3cd2785428703f505ad7be95fdeac81f0bcd7d1eca975acda0a7fafa437af0d1dec0eaedfecafe06c

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYFR0/l2k1TB1ROTH1thI0dtPP5:Lz071uv4BPMkibTIA5FRo2ktRs1XjZ

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks