Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

q.exe

windows7-x64

10

q.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    q.exe

  • Size

    14KB

  • Sample

    230920-kmka5ahc54

  • MD5

    357b53653e87dbe9f437e96afafdf949

  • SHA1

    57aa6aeb32b0f6b38a31bb0e21294eabcab96350

  • SHA256

    baf2608987cf14e3a69c7130b732c0618e4a4efd8358a783e572c3dff388d760

  • SHA512

    25072e855a355097f64262c953624a3d471034f0622e30e3830d553fa5027f9e01225bbb67856bfa55b97c690409c440536e410e69710bc9beafe18915abddf0

  • SSDEEP

    192:YHCugRK83SxHn2OQ/dmBI4KBPwgir+xzi3TbqUqV/Qjo7AGa:sCxRKqbOCdWIVBPk+xzinfCXAn

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://106.52.187.62:50051/jaEL

Attributes
  • headers User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; BOIE9;ENUSMSE)

Targets

    • Target

      q.exe

    • Size

      14KB

    • MD5

      357b53653e87dbe9f437e96afafdf949

    • SHA1

      57aa6aeb32b0f6b38a31bb0e21294eabcab96350

    • SHA256

      baf2608987cf14e3a69c7130b732c0618e4a4efd8358a783e572c3dff388d760

    • SHA512

      25072e855a355097f64262c953624a3d471034f0622e30e3830d553fa5027f9e01225bbb67856bfa55b97c690409c440536e410e69710bc9beafe18915abddf0

    • SSDEEP

      192:YHCugRK83SxHn2OQ/dmBI4KBPwgir+xzi3TbqUqV/Qjo7AGa:sCxRKqbOCdWIVBPk+xzinfCXAn

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks