Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ba7d1215e1ec39ef340fd47fb9306de0N.exe

  • Size

    2.4MB

  • Sample

    240829-mhq9zswgnf

  • MD5

    ba7d1215e1ec39ef340fd47fb9306de0

  • SHA1

    58af3ba1d28fb58458925d4fd4b0aa4bb0cd96ff

  • SHA256

    81f441ebfa71c9a04c4b5a4b22d9f1e4482c5859a2fb77c5a8d54201df1241b8

  • SHA512

    32c21ea19fdaf2fda84c5c826cc30438b569cbe9d3c447d8e3f1eb4e924db6a322b47f72691aa7a2ebb04ad939aeade2046e035fe5431724249d764895465971

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTWsuT9cbA9Vs:NABv

Malware Config

Targets

    • Target

      ba7d1215e1ec39ef340fd47fb9306de0N.exe

    • Size

      2.4MB

    • MD5

      ba7d1215e1ec39ef340fd47fb9306de0

    • SHA1

      58af3ba1d28fb58458925d4fd4b0aa4bb0cd96ff

    • SHA256

      81f441ebfa71c9a04c4b5a4b22d9f1e4482c5859a2fb77c5a8d54201df1241b8

    • SHA512

      32c21ea19fdaf2fda84c5c826cc30438b569cbe9d3c447d8e3f1eb4e924db6a322b47f72691aa7a2ebb04ad939aeade2046e035fe5431724249d764895465971

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTWsuT9cbA9Vs:NABv

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Blocklisted process makes network request

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks