Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

21b5f15387...54.exe

windows7-x64

10

21b5f15387...54.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    21b5f1538730a9c35c240113310af6ffaf96c19aab9c1da391c40df8e3b75554

  • Size

    19KB

  • Sample

    230822-2tywjahd2x

  • MD5

    e294976a9609bae82c28379ec4da1e00

  • SHA1

    8c9f46489812bd57cc4626b69e0f64a6e1fb8b1c

  • SHA256

    21b5f1538730a9c35c240113310af6ffaf96c19aab9c1da391c40df8e3b75554

  • SHA512

    bc2bd38ba0c6415b1f286d61087253cf62fca4af3af2fdb0580716591b7aa9eebd69e2a5c2e09e623ed35d4c01788e078d4301c62e7a82c76afe0c77ba48dc71

  • SSDEEP

    192:LV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2FR7VWF8qa1Dojjgi:lqaCF31cix+Dc4zjK7YFF46gi

Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://111.229.211.161:59999/fH9v

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727; InfoPath.2)

Targets

    • Target

      21b5f1538730a9c35c240113310af6ffaf96c19aab9c1da391c40df8e3b75554

    • Size

      19KB

    • MD5

      e294976a9609bae82c28379ec4da1e00

    • SHA1

      8c9f46489812bd57cc4626b69e0f64a6e1fb8b1c

    • SHA256

      21b5f1538730a9c35c240113310af6ffaf96c19aab9c1da391c40df8e3b75554

    • SHA512

      bc2bd38ba0c6415b1f286d61087253cf62fca4af3af2fdb0580716591b7aa9eebd69e2a5c2e09e623ed35d4c01788e078d4301c62e7a82c76afe0c77ba48dc71

    • SSDEEP

      192:LV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2FR7VWF8qa1Dojjgi:lqaCF31cix+Dc4zjK7YFF46gi

    Score
    10/10
    cobaltstrikebackdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks