Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b810195757e590559254412e32f8380862a3c27152703e63a47553b872194ed5

  • Size

    1.6MB

  • Sample

    240818-efffpstfjg

  • MD5

    d1b97739fb25846dbbc0359cec23ceb5

  • SHA1

    5cc0b673259bbbdfb846d074199c0d73394e4a6c

  • SHA256

    b810195757e590559254412e32f8380862a3c27152703e63a47553b872194ed5

  • SHA512

    cdec860b69ee2bf8306e78f5fe1132dd8900c8950b5f2116387cc056aabdcbff3b8c57cd22f0da4ea3a5f956b682d8fae4941e01b55bec85b904a1e9ba8f6bb4

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWY1s38kQu12bPxvyuzaBgJ9pcFte:Lz071uv4BPMkibTIA5I4TNrpDGUIE

Malware Config

Targets

    • Target

      b810195757e590559254412e32f8380862a3c27152703e63a47553b872194ed5

    • Size

      1.6MB

    • MD5

      d1b97739fb25846dbbc0359cec23ceb5

    • SHA1

      5cc0b673259bbbdfb846d074199c0d73394e4a6c

    • SHA256

      b810195757e590559254412e32f8380862a3c27152703e63a47553b872194ed5

    • SHA512

      cdec860b69ee2bf8306e78f5fe1132dd8900c8950b5f2116387cc056aabdcbff3b8c57cd22f0da4ea3a5f956b682d8fae4941e01b55bec85b904a1e9ba8f6bb4

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWY1s38kQu12bPxvyuzaBgJ9pcFte:Lz071uv4BPMkibTIA5I4TNrpDGUIE

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Blocklisted process makes network request

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks