Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2577b63fe6dcf1c7f158e0b24f3ff440N.exe
-
Size
2.9MB
-
Sample
240902-gcwpmatalk
-
MD5
2577b63fe6dcf1c7f158e0b24f3ff440
-
SHA1
677ee8d8700b16c29967b5780801e0d80e699cd9
-
SHA256
5319e810e34d4cfb9b23756e8969625203010bb0fcf8c99dc0357c762e248455
-
SHA512
b1e583f44c2d1c0f8384e2f421820e897385a734435495ee40b909d5d9a5f04657873717e5c2990db35169cbb17c0f0c802622ed794f270e9d57ba48012506b2
-
SSDEEP
49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkibTIA5LDGTDRkd:71ONtyBeSFkXV1etEKLlWUTOfeiRA2Rd
Behavioral task
behavioral1
Sample
2577b63fe6dcf1c7f158e0b24f3ff440N.exe
Resource
win7-20240705-en
Malware Config
Targets
-
-
Target
2577b63fe6dcf1c7f158e0b24f3ff440N.exe
-
Size
2.9MB
-
MD5
2577b63fe6dcf1c7f158e0b24f3ff440
-
SHA1
677ee8d8700b16c29967b5780801e0d80e699cd9
-
SHA256
5319e810e34d4cfb9b23756e8969625203010bb0fcf8c99dc0357c762e248455
-
SHA512
b1e583f44c2d1c0f8384e2f421820e897385a734435495ee40b909d5d9a5f04657873717e5c2990db35169cbb17c0f0c802622ed794f270e9d57ba48012506b2
-
SSDEEP
49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkibTIA5LDGTDRkd:71ONtyBeSFkXV1etEKLlWUTOfeiRA2Rd
-
XMRig Miner payload
-
Blocklisted process makes network request
-
Executes dropped EXE
-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-