Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

10/10/2024, 04:54 UTC

241010-fjqxaaxgme 10

10/10/2024, 02:37 UTC

241010-c366tsvgpc 10

29/01/2024, 18:13 UTC

240129-wtq8sshdcl 10

General

  • Target

    9b3430f42a0fb00d014c2fa208662865.exe

  • Size

    4.8MB

  • Sample

    241010-c366tsvgpc

  • MD5

    9b3430f42a0fb00d014c2fa208662865

  • SHA1

    09a16508bcc0a6da90c272daa2eff627ccd3205d

  • SHA256

    8062eb6eea56d33e35ea32f6eef98636bbd66c2d177c1889c4f0a960b0d14d47

  • SHA512

    d2887d08a66e10af1e89fb60f2a4f8d7bae7dc5cccc0301a70cb5ff120094c5e6247b44cf3b1b2b1c7e5d48e687319b842a721d757ebb44cf484ef766db92e29

  • SSDEEP

    98304:CdlaF/1RByjAQG/Mul2rq/aReDkizMeQUh:CdYvkji/Mul2rVe4iwVUh

Score
10/10

Malware Config

Targets

    • Target

      9b3430f42a0fb00d014c2fa208662865.exe

    • Size

      4.8MB

    • MD5

      9b3430f42a0fb00d014c2fa208662865

    • SHA1

      09a16508bcc0a6da90c272daa2eff627ccd3205d

    • SHA256

      8062eb6eea56d33e35ea32f6eef98636bbd66c2d177c1889c4f0a960b0d14d47

    • SHA512

      d2887d08a66e10af1e89fb60f2a4f8d7bae7dc5cccc0301a70cb5ff120094c5e6247b44cf3b1b2b1c7e5d48e687319b842a721d757ebb44cf484ef766db92e29

    • SSDEEP

      98304:CdlaF/1RByjAQG/Mul2rq/aReDkizMeQUh:CdYvkji/Mul2rVe4iwVUh

    Score
    10/10
    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • .NET Reactor proctector

      Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.