Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

3c2d4318fb...be.ps1

windows7-x64

10

3c2d4318fb...be.ps1

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3c2d4318fbd93cb361d2f1553e6d8f6ff731211bdd18a9edd1ae1e165530bbbe

  • Size

    5KB

  • Sample

    230804-c8yrmsab9t

  • MD5

    6250ecde862528d5f12788e076043c30

  • SHA1

    7c3beadfe2557c8e97ff76c27ca4c7368deddb6b

  • SHA256

    3c2d4318fbd93cb361d2f1553e6d8f6ff731211bdd18a9edd1ae1e165530bbbe

  • SHA512

    ba01edc3969ffd3c88f64f3919e6fa683bf8ba580b7aa1c600eb9d0080ecfa14c180e79db19c34d4b38e16eb0499d59c9155593ff29f035015caa5f751efaa4a

  • SSDEEP

    96:lg5EvvvOmVeLxigxAlaTTlXP9rZBS0BEB6qaxA0l8cV0l8:OyvOPLxfxsIFrZBS0BEB6nrP6a

Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.25.139:80/jquery-3.3.2.slim.min.js

Attributes
  • user_agent

    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko

Targets

    • Target

      3c2d4318fbd93cb361d2f1553e6d8f6ff731211bdd18a9edd1ae1e165530bbbe

    • Size

      5KB

    • MD5

      6250ecde862528d5f12788e076043c30

    • SHA1

      7c3beadfe2557c8e97ff76c27ca4c7368deddb6b

    • SHA256

      3c2d4318fbd93cb361d2f1553e6d8f6ff731211bdd18a9edd1ae1e165530bbbe

    • SHA512

      ba01edc3969ffd3c88f64f3919e6fa683bf8ba580b7aa1c600eb9d0080ecfa14c180e79db19c34d4b38e16eb0499d59c9155593ff29f035015caa5f751efaa4a

    • SSDEEP

      96:lg5EvvvOmVeLxigxAlaTTlXP9rZBS0BEB6qaxA0l8cV0l8:OyvOPLxfxsIFrZBS0BEB6nrP6a

    Score
    10/10
    cobaltstrikebackdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks