Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2025-03-21...at.exe

windows7-x64

10

2025-03-21...at.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-03-21_006d083ca2bbebb47a55118c43c73d61_cobalt-strike_poet-rat

  • Size

    4.3MB

  • Sample

    250321-jyvessvwhw

  • MD5

    006d083ca2bbebb47a55118c43c73d61

  • SHA1

    db540e3efe40e0155417fff376b98ae4d9bbb697

  • SHA256

    23203b9395c7659e510c5e6baab0421e44e23242cb99712a0ab76ddd12635c8f

  • SHA512

    023057ea803254e992e4a8064cbe47209025836b0187651ced9d04a1696d9b161109d305bce17cf6b9df7cc4335b6b8ae768eeb655eda00bc21d18efefd713e5

  • SSDEEP

    49152:oezaTF8FcNkNdfE0pZ9ozt4wIt56uL3pgrCEdMKPFotsgEBr6GjvzW+UBA3Gd7pq:oemTLkNdfE0pZrt56utgpPFotBER/mQ7

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      2025-03-21_006d083ca2bbebb47a55118c43c73d61_cobalt-strike_poet-rat

    • Size

      4.3MB

    • MD5

      006d083ca2bbebb47a55118c43c73d61

    • SHA1

      db540e3efe40e0155417fff376b98ae4d9bbb697

    • SHA256

      23203b9395c7659e510c5e6baab0421e44e23242cb99712a0ab76ddd12635c8f

    • SHA512

      023057ea803254e992e4a8064cbe47209025836b0187651ced9d04a1696d9b161109d305bce17cf6b9df7cc4335b6b8ae768eeb655eda00bc21d18efefd713e5

    • SSDEEP

      49152:oezaTF8FcNkNdfE0pZ9ozt4wIt56uL3pgrCEdMKPFotsgEBr6GjvzW+UBA3Gd7pq:oemTLkNdfE0pZrt56utgpPFotBER/mQ7

    Score
    10/10
    xmrigminerupx

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks