Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

877050c002...48.exe

windows7-x64

10

877050c002...48.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    877050c00267419ddad96201ce36f818fe6b6f10352b96146c4f04efdb87d248

  • Size

    307KB

  • Sample

    221203-cfkpbahd41

  • MD5

    3cf595ebfdf7daccaf739bfc7e00b74c

  • SHA1

    1eaee033514ecd257a779b3a6b596ab56bc65e84

  • SHA256

    877050c00267419ddad96201ce36f818fe6b6f10352b96146c4f04efdb87d248

  • SHA512

    3d97db8099972d4c1032b3bced4ffd9eedcfb27dd5164b4c3e0ec3e6ec075b737acb21de4c577b76d83f31145f73edd2cbdd845c0e8416436ea56b3ea2687031

  • SSDEEP

    6144:bqzWT72Y0S4zinYKTY1SQshfRPVQe1MZkIYSccr7wbstO+PECYeixlYGicOG:bCS7SSrYsY1UMqMZJYSN7wbstO+8fve2

Score
10/10
cobaltstrikebackdoorpersistencetrojan

Malware Config

Targets

    • Target

      877050c00267419ddad96201ce36f818fe6b6f10352b96146c4f04efdb87d248

    • Size

      307KB

    • MD5

      3cf595ebfdf7daccaf739bfc7e00b74c

    • SHA1

      1eaee033514ecd257a779b3a6b596ab56bc65e84

    • SHA256

      877050c00267419ddad96201ce36f818fe6b6f10352b96146c4f04efdb87d248

    • SHA512

      3d97db8099972d4c1032b3bced4ffd9eedcfb27dd5164b4c3e0ec3e6ec075b737acb21de4c577b76d83f31145f73edd2cbdd845c0e8416436ea56b3ea2687031

    • SSDEEP

      6144:bqzWT72Y0S4zinYKTY1SQshfRPVQe1MZkIYSccr7wbstO+PECYeixlYGicOG:bCS7SSrYsY1UMqMZJYSN7wbstO+8fve2

    Score
    10/10
    cobaltstrikebackdoorpersistencetrojan

    • Cobaltstrike

      Detected malicious payload which is part of Cobaltstrike.

      trojanbackdoorcobaltstrike

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks