Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

9b70485012...f1.exe

windows7-x64

10

9b70485012...f1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9b70485012a34b879c651310ddf63e47ec32d0505714fffeefaff6a9e6aa6bf1

  • Size

    19KB

  • Sample

    231005-xlrp2agd66

  • MD5

    ef10abcd4ada4523cb89cf3cc9ab8f98

  • SHA1

    5019aa5933a9ac5e4b1d7b4d60db1535a7075685

  • SHA256

    9b70485012a34b879c651310ddf63e47ec32d0505714fffeefaff6a9e6aa6bf1

  • SHA512

    6ee408a94afd6fcafb8ab77c327a59f56e96f56eba7b8b75526edf31ecb9f39b2fd3b3c3c7cb649e9894669b50794046ec3c504311d0127b65fb5169ab831460

  • SSDEEP

    192:aV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/27daWF8qa1Dojjgi:0qaCF31cix+Dc4zj8RFF46gi

Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.22.52:4445/Xbk8

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)

Targets

    • Target

      9b70485012a34b879c651310ddf63e47ec32d0505714fffeefaff6a9e6aa6bf1

    • Size

      19KB

    • MD5

      ef10abcd4ada4523cb89cf3cc9ab8f98

    • SHA1

      5019aa5933a9ac5e4b1d7b4d60db1535a7075685

    • SHA256

      9b70485012a34b879c651310ddf63e47ec32d0505714fffeefaff6a9e6aa6bf1

    • SHA512

      6ee408a94afd6fcafb8ab77c327a59f56e96f56eba7b8b75526edf31ecb9f39b2fd3b3c3c7cb649e9894669b50794046ec3c504311d0127b65fb5169ab831460

    • SSDEEP

      192:aV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/27daWF8qa1Dojjgi:0qaCF31cix+Dc4zj8RFF46gi

    Score
    10/10
    cobaltstrikebackdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks