Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

05/09/2024, 17:46 UTC

240905-wcmt2sxand 10

05/09/2024, 12:38 UTC

240905-pve4la1hnc 10

05/09/2024, 11:41 UTC

240905-ntfs3a1amg 10

04/09/2024, 21:24 UTC

240904-z9ergswfqr 10

04/09/2024, 20:24 UTC

240904-y6qh5swajp 10

04/09/2024, 15:52 UTC

240904-tbjpwsvcjd 10

General

  • Target

    ETC XMR2.zip

  • Size

    2.6MB

  • MD5

    cf1133bb89fe5e2b9a312f8f8a0474be

  • SHA1

    3f47d3812e2c316f081787a7da604e638a3e9c3d

  • SHA256

    2250742c48e534d30558354bce47741a3b853aa0047d48e42c84439c6af4b9ef

  • SHA512

    ba571d05de6e466ac869c42989c5de80da004415c8bf50cb437135c5ded502cae88c45603c2a64d894838f5df90adfb632c21eed98181a661f1c0464c9010693

  • SSDEEP

    49152:o4R9znkcibySPeKfmoTcltb3FbJSQhaB+8CPnatblrdz8w2J9k1T4C6yK:L9nePmoTc3Dx4CPn6Fdz8w2JQ8Cc

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 2 IoCs
  • Xmrig family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ETC XMR2.zip
    .zip
  • ETC XMR2/SHA256SUMS
  • ETC XMR2/start (1).bat
  • ETC XMR2/start (10).bat
  • ETC XMR2/start (11).bat
  • ETC XMR2/start (12).bat
  • ETC XMR2/start (13).bat
  • ETC XMR2/start (14).bat
  • ETC XMR2/start (15).bat
  • ETC XMR2/start (16).bat
  • ETC XMR2/start (2).bat
  • ETC XMR2/start (3).bat
  • ETC XMR2/start (4).bat
  • ETC XMR2/start (5).bat
  • ETC XMR2/start (6).bat
  • ETC XMR2/start (7).bat
  • ETC XMR2/start (8).bat
  • ETC XMR2/start (9).bat
  • ETC XMR2/start.bat
  • ETC XMR2/xmrig.exe
    .exe windows:6 windows x64 arch:x64

    12806e48b853545b536463546db4baa1


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.