Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

jbHmvbzS.ps1

windows7-x64

10

jbHmvbzS.ps1

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    jbHmvbzS

  • Size

    3KB

  • Sample

    230504-tzkl4afe8y

  • MD5

    5274758378f9fc7ec1f11dc97fa86768

  • SHA1

    cfa2566b2bf1824dcc57d98505ba6929714fa42c

  • SHA256

    985f82e71e6781286468c4e8f576009fa3bfdd30facdbc638ec49725da93430b

  • SHA512

    8a391437f015c072023c03e6e9017ae11fa6e8438be90aaf5c419a734dd34061753209acd018669eb13755cb97bfe44f3188b6366394c854cac9e573ad548cb4

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

3.22.53.161:14524

Targets

    • Target

      jbHmvbzS

    • Size

      3KB

    • MD5

      5274758378f9fc7ec1f11dc97fa86768

    • SHA1

      cfa2566b2bf1824dcc57d98505ba6929714fa42c

    • SHA256

      985f82e71e6781286468c4e8f576009fa3bfdd30facdbc638ec49725da93430b

    • SHA512

      8a391437f015c072023c03e6e9017ae11fa6e8438be90aaf5c419a734dd34061753209acd018669eb13755cb97bfe44f3188b6366394c854cac9e573ad548cb4

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks