Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    febdcc68bc06b6d026841745d35eee5e9b84df2d9ad68d567d2ac11c7388075e

  • Size

    5.2MB

  • Sample

    230930-sw73jsde41

  • MD5

    36097c679c0410351d143f8901643314

  • SHA1

    8dad059e00d81857f9b97474bf7bb54d1a35513f

  • SHA256

    febdcc68bc06b6d026841745d35eee5e9b84df2d9ad68d567d2ac11c7388075e

  • SHA512

    91801a25b0f1a9a01bb793f54ca879125edb088bf506623b8272b4ba9dcfbfd3d0187af84853cb487e98c078c4d5e8bf35475db05de0c3a0876e897d307c3710

  • SSDEEP

    98304:pSvH5SALvCCKS3Wb14lZc2ZVXE+qIcZ26ChibdcR:peyCKS3Wb1CG4VXlqfZjCc5

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.95.129:4433

Targets

    • Target

      febdcc68bc06b6d026841745d35eee5e9b84df2d9ad68d567d2ac11c7388075e

    • Size

      5.2MB

    • MD5

      36097c679c0410351d143f8901643314

    • SHA1

      8dad059e00d81857f9b97474bf7bb54d1a35513f

    • SHA256

      febdcc68bc06b6d026841745d35eee5e9b84df2d9ad68d567d2ac11c7388075e

    • SHA512

      91801a25b0f1a9a01bb793f54ca879125edb088bf506623b8272b4ba9dcfbfd3d0187af84853cb487e98c078c4d5e8bf35475db05de0c3a0876e897d307c3710

    • SSDEEP

      98304:pSvH5SALvCCKS3Wb14lZc2ZVXE+qIcZ26ChibdcR:peyCKS3Wb1CG4VXlqfZjCc5

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks