Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a264b783840ed6631cbe7dcd7496cc8d7b1c1d98ceac22d392974c98bfa66a7b

  • Size

    1.7MB

  • Sample

    240920-1qmhnazfqq

  • MD5

    9f6ef1867a1293da8f2640c45f7a7fc1

  • SHA1

    dca9b83c3e28e79071249db473268d25fc78cf76

  • SHA256

    a264b783840ed6631cbe7dcd7496cc8d7b1c1d98ceac22d392974c98bfa66a7b

  • SHA512

    fa3a8e3522055cd2c3d8b1605d1c030e7c39f3cc86aaf038ad5bc17404cdab8582d710cee1892ae7fd3d064ffcf7d73fed06fc3f7ab049f430de5ce7c3586bee

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkFfkeMlN675EgEPgspmBeQxWCLU0SwV0L4ff:Lz071uv4BPMkFfdg6NsIRSwVf3

Malware Config

Targets

    • Target

      a264b783840ed6631cbe7dcd7496cc8d7b1c1d98ceac22d392974c98bfa66a7b

    • Size

      1.7MB

    • MD5

      9f6ef1867a1293da8f2640c45f7a7fc1

    • SHA1

      dca9b83c3e28e79071249db473268d25fc78cf76

    • SHA256

      a264b783840ed6631cbe7dcd7496cc8d7b1c1d98ceac22d392974c98bfa66a7b

    • SHA512

      fa3a8e3522055cd2c3d8b1605d1c030e7c39f3cc86aaf038ad5bc17404cdab8582d710cee1892ae7fd3d064ffcf7d73fed06fc3f7ab049f430de5ce7c3586bee

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkFfkeMlN675EgEPgspmBeQxWCLU0SwV0L4ff:Lz071uv4BPMkFfdg6NsIRSwVf3

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks