Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

626f75c2bd...19.exe

windows7-x64

10

626f75c2bd...19.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    626f75c2bd1577200b6e25d24c4916986030262599df71709c3739427a586719

  • Size

    131KB

  • Sample

    230930-hpw2laba32

  • MD5

    7f0334cb7698d845ed77a449635b59fd

  • SHA1

    d0e02b4978239c35b08ff76f5226a3e5262b295c

  • SHA256

    626f75c2bd1577200b6e25d24c4916986030262599df71709c3739427a586719

  • SHA512

    1afa612ccee4848efec65fef7eadff94462ed3a675b86ecd19dbfd8e6fa6747af875d45955fab638abf09a3451f1d233e6e9e9db62821aa36b45cdf5507b146c

  • SSDEEP

    1536:EQnH7Rs9yjimaRXRKZqeWG3g4WgRVHGUvMFMQiNlRDBW3BoJAwz5+zq:nnb4bKD3g4WgRVH+MRVW38Iq

Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://106.52.201.45:888/HyVF

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; BOIE9;ENUS)

Targets

    • Target

      626f75c2bd1577200b6e25d24c4916986030262599df71709c3739427a586719

    • Size

      131KB

    • MD5

      7f0334cb7698d845ed77a449635b59fd

    • SHA1

      d0e02b4978239c35b08ff76f5226a3e5262b295c

    • SHA256

      626f75c2bd1577200b6e25d24c4916986030262599df71709c3739427a586719

    • SHA512

      1afa612ccee4848efec65fef7eadff94462ed3a675b86ecd19dbfd8e6fa6747af875d45955fab638abf09a3451f1d233e6e9e9db62821aa36b45cdf5507b146c

    • SSDEEP

      1536:EQnH7Rs9yjimaRXRKZqeWG3g4WgRVHGUvMFMQiNlRDBW3BoJAwz5+zq:nnb4bKD3g4WgRVH+MRVW38Iq

    Score
    10/10
    cobaltstrikebackdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks