Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    278be9ec3f5bfe9fe763d237945fb030N

  • Size

    1.3MB

  • Sample

    240911-l79besvamp

  • MD5

    278be9ec3f5bfe9fe763d237945fb030

  • SHA1

    72451f01f7e3006447d03a15d93fb84deb25f100

  • SHA256

    038555567c4fd0dc6ec133434eca4b7dc5caeebb30f5acea0a43900f0ef1dc83

  • SHA512

    7789f8177f1d8a8bf5e894bfee124235f241c5d89a23bdc60ff60991a0bdc445aff85700ec0775d73773a1611a95d64d5335de494205b897002c9e6cd2533851

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlGC78XIHbAY68Nd9NtuQvKe:knw9oUUEEDlGUJ8Y6M3tx

Malware Config

Targets

    • Target

      278be9ec3f5bfe9fe763d237945fb030N

    • Size

      1.3MB

    • MD5

      278be9ec3f5bfe9fe763d237945fb030

    • SHA1

      72451f01f7e3006447d03a15d93fb84deb25f100

    • SHA256

      038555567c4fd0dc6ec133434eca4b7dc5caeebb30f5acea0a43900f0ef1dc83

    • SHA512

      7789f8177f1d8a8bf5e894bfee124235f241c5d89a23bdc60ff60991a0bdc445aff85700ec0775d73773a1611a95d64d5335de494205b897002c9e6cd2533851

    • SSDEEP

      24576:JanwhSe11QSONCpGJCjETPlGC78XIHbAY68Nd9NtuQvKe:knw9oUUEEDlGUJ8Y6M3tx

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks