Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

service.hta

windows7-x64

8

service.hta

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    service.hta

  • Size

    2KB

  • Sample

    250327-d6kyfaw1bv

  • MD5

    0028c690c43f28fe571cd968627127a1

  • SHA1

    fb8672d3e91ab19eb698785d89dc19b57469c69f

  • SHA256

    3ccad5317d4c96825a9d45d9be545bf0c6d5aff47b6d3a0193aed10cd375208c

  • SHA512

    9b63653284c8fa136ec87b82a2123bad839e746c5d5663f3c2c8f7f4bd4b11258193de2e3cffb34151818c10855d890ef3a74b5a9bdb3841379bbd25c5acc020

Score
10/10
xmrigdiscoverydropperminer

Malware Config

Targets

    • Target

      service.hta

    • Size

      2KB

    • MD5

      0028c690c43f28fe571cd968627127a1

    • SHA1

      fb8672d3e91ab19eb698785d89dc19b57469c69f

    • SHA256

      3ccad5317d4c96825a9d45d9be545bf0c6d5aff47b6d3a0193aed10cd375208c

    • SHA512

      9b63653284c8fa136ec87b82a2123bad839e746c5d5663f3c2c8f7f4bd4b11258193de2e3cffb34151818c10855d890ef3a74b5a9bdb3841379bbd25c5acc020

    Score
    10/10
    discoverydropperxmrigminer

    • Xmrig family

      xmrig

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Download via BitsAdmin

      dropper

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks