Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f532f79a96c14af4d39c1dd6c7398bd0N.exe

  • Size

    2.0MB

  • Sample

    240905-x8swlsyekg

  • MD5

    f532f79a96c14af4d39c1dd6c7398bd0

  • SHA1

    9ce46bb57032cda90d2aa4af18998510e16a2ede

  • SHA256

    3432451df8aad17ba60664446662692f6e7733e95009d73f7af29ed99bc18281

  • SHA512

    9da4668a35f331387fb36df99805d0748911bf6468849a412e85af88e68e8dfc31e7f5e99c730164bdee56134eee0b09ca459a4192b94cc56d6d2d27592941c4

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pXHqx4EKB6Se:NABO

Malware Config

Targets

    • Target

      f532f79a96c14af4d39c1dd6c7398bd0N.exe

    • Size

      2.0MB

    • MD5

      f532f79a96c14af4d39c1dd6c7398bd0

    • SHA1

      9ce46bb57032cda90d2aa4af18998510e16a2ede

    • SHA256

      3432451df8aad17ba60664446662692f6e7733e95009d73f7af29ed99bc18281

    • SHA512

      9da4668a35f331387fb36df99805d0748911bf6468849a412e85af88e68e8dfc31e7f5e99c730164bdee56134eee0b09ca459a4192b94cc56d6d2d27592941c4

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5lCx7kvRWa4pXHqx4EKB6Se:NABO

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks