Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

google-chr...64.deb

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    google-chrome-stable_current_amd64.deb

  • Size

    90.3MB

  • Sample

    230612-ypsl6seb3z

  • MD5

    dd0eddde8db9492a7826acbfb1499cc2

  • SHA1

    004796a1e3aba6f00df61c012afd91ba563ee93e

  • SHA256

    6a624904d7a7ee2ec27e637164ddddd102cc799ffa9c14a05f88762363200bf1

  • SHA512

    fbbfc2b3d9bd3cfe19e2af62cd8b216700b994df52043c01b84caa69655641ab755827266f11dcc5ea6f44ba2980ccf16a35e88ab7102750e2bb7eafb7a1eedf

  • SSDEEP

    1572864:x8vFCXj7Vldzn63FQwAjYxQC/YSk1olcHeAiNnr0DZTHiXeW1Hsc4K03BOmfUwUN:yQXBnNnYkZHPiNnQBVW1M9cN

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.209:4444

Targets

    • Target

      google-chrome-stable_current_amd64.deb

    • Size

      90.3MB

    • MD5

      dd0eddde8db9492a7826acbfb1499cc2

    • SHA1

      004796a1e3aba6f00df61c012afd91ba563ee93e

    • SHA256

      6a624904d7a7ee2ec27e637164ddddd102cc799ffa9c14a05f88762363200bf1

    • SHA512

      fbbfc2b3d9bd3cfe19e2af62cd8b216700b994df52043c01b84caa69655641ab755827266f11dcc5ea6f44ba2980ccf16a35e88ab7102750e2bb7eafb7a1eedf

    • SSDEEP

      1572864:x8vFCXj7Vldzn63FQwAjYxQC/YSk1olcHeAiNnr0DZTHiXeW1Hsc4K03BOmfUwUN:yQXBnNnYkZHPiNnQBVW1M9cN

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Drops desktop.ini file(s)

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks