Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    5562c77f686b8097798eef7b0aa9054034de3d5a39d2284cb4d6fa8a8e031687N

  • Size

    1.7MB

  • Sample

    240921-v2he7athmh

  • MD5

    e70d24529b08e0f784fed16cebbe4140

  • SHA1

    beec23f9c5b7514a0103b27ffe8ba7724e6c1b82

  • SHA256

    5562c77f686b8097798eef7b0aa9054034de3d5a39d2284cb4d6fa8a8e031687

  • SHA512

    dad38df0c0546fc51a6ef069c6831d9750b5f588174c1e875d4d9ebfbfcc1174bcbb77e990bd52625e203ec76b68d0c63ea3b9c73c5407f18aa50e8c8f8b95aa

  • SSDEEP

    24576:zv3/fTLF671TilQFG4P5PMkFfkeMlN675EgEPgspmBeQxWCLU0SwV0L+ct:Lz071uv4BPMkFfdg6NsIRSwVmt

Malware Config

Targets

    • Target

      5562c77f686b8097798eef7b0aa9054034de3d5a39d2284cb4d6fa8a8e031687N

    • Size

      1.7MB

    • MD5

      e70d24529b08e0f784fed16cebbe4140

    • SHA1

      beec23f9c5b7514a0103b27ffe8ba7724e6c1b82

    • SHA256

      5562c77f686b8097798eef7b0aa9054034de3d5a39d2284cb4d6fa8a8e031687

    • SHA512

      dad38df0c0546fc51a6ef069c6831d9750b5f588174c1e875d4d9ebfbfcc1174bcbb77e990bd52625e203ec76b68d0c63ea3b9c73c5407f18aa50e8c8f8b95aa

    • SSDEEP

      24576:zv3/fTLF671TilQFG4P5PMkFfkeMlN675EgEPgspmBeQxWCLU0SwV0L+ct:Lz071uv4BPMkFfdg6NsIRSwVmt

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks