Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    d958950ec90d523f75d36f4be68e847a43dd9e74c9bb00831b4622ff35243420N

  • Size

    1.9MB

  • Sample

    240921-qw3fysvdjd

  • MD5

    d6a18ee2c444360815f25e5e001a22e0

  • SHA1

    e9c67e878f97b678ef97577b4cebb1dab05f77d1

  • SHA256

    d958950ec90d523f75d36f4be68e847a43dd9e74c9bb00831b4622ff35243420

  • SHA512

    17275d24998e045979ff012ae64a8abd6f12ec02390fa134c4b7ec9b74170bfef5371edb39727d7ba13cd77dc2969e792e0481f4ba626146c9b05a1b894b696a

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkyW1HU/ek5Q1szp5NnNvZWNChZ7fI+7RrTFl6hvVjq:Lz071uv4BPMkyW10/w16BvZX71Fq8+w

Malware Config

Targets

    • Target

      d958950ec90d523f75d36f4be68e847a43dd9e74c9bb00831b4622ff35243420N

    • Size

      1.9MB

    • MD5

      d6a18ee2c444360815f25e5e001a22e0

    • SHA1

      e9c67e878f97b678ef97577b4cebb1dab05f77d1

    • SHA256

      d958950ec90d523f75d36f4be68e847a43dd9e74c9bb00831b4622ff35243420

    • SHA512

      17275d24998e045979ff012ae64a8abd6f12ec02390fa134c4b7ec9b74170bfef5371edb39727d7ba13cd77dc2969e792e0481f4ba626146c9b05a1b894b696a

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkyW1HU/ek5Q1szp5NnNvZWNChZ7fI+7RrTFl6hvVjq:Lz071uv4BPMkyW10/w16BvZX71Fq8+w

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks