Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

b1e8df3a64...85.exe

windows7-x64

10

b1e8df3a64...85.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b1e8df3a649abba833ba87d7b8b683d4eedc42e5ce0f109b9154d40c5e939a85

  • Size

    1.3MB

  • Sample

    230703-esfl8sfg9y

  • MD5

    715d4ac7a389acc5db7d001ca750754d

  • SHA1

    a36bc516cb7de4a8cc29d444af99021e4635fad3

  • SHA256

    b1e8df3a649abba833ba87d7b8b683d4eedc42e5ce0f109b9154d40c5e939a85

  • SHA512

    ea128b7aa150772f359e4a7dba44e008a85c1a12d561cfbcbb0cbcf0fe49fbe75ed88ce74d53ed1b9a82e616cd385b9c0a3854af11b3190ea98b0effd392d3d2

  • SSDEEP

    12288:+eumY51d94ROk0/5tHZusQMcnpea/OKz2I1zXEgOMjBwQfxfirYyltS7PORxilh:Tc5H94snxtHZPQhZrEgRjtfy7DxiD1C

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

43.138.26.158:10000

Targets

    • Target

      b1e8df3a649abba833ba87d7b8b683d4eedc42e5ce0f109b9154d40c5e939a85

    • Size

      1.3MB

    • MD5

      715d4ac7a389acc5db7d001ca750754d

    • SHA1

      a36bc516cb7de4a8cc29d444af99021e4635fad3

    • SHA256

      b1e8df3a649abba833ba87d7b8b683d4eedc42e5ce0f109b9154d40c5e939a85

    • SHA512

      ea128b7aa150772f359e4a7dba44e008a85c1a12d561cfbcbb0cbcf0fe49fbe75ed88ce74d53ed1b9a82e616cd385b9c0a3854af11b3190ea98b0effd392d3d2

    • SSDEEP

      12288:+eumY51d94ROk0/5tHZusQMcnpea/OKz2I1zXEgOMjBwQfxfirYyltS7PORxilh:Tc5H94snxtHZPQhZrEgRjtfy7DxiD1C

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks