Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
5ab7d8d0e04526d8fc7cfd6db66aa8813c899388f39d2951ee9088661252309c
-
Size
9KB
-
Sample
231012-cnspwsaa8s
-
MD5
40340686bd2e6b859b5fa3092e531632
-
SHA1
367b7e83256bfd48b74f83166f251ca799a83e9a
-
SHA256
5ab7d8d0e04526d8fc7cfd6db66aa8813c899388f39d2951ee9088661252309c
-
SHA512
ae597e1c062b3dd79e7cf160b6401b6f49734c88583a3d234754ad4d4d2749817684d932c4d8fbebe7a373d174aa1984abe056f302575cf91e000607098345b7
-
SSDEEP
192:+Rqd3PcxUjboojUf43iaK5dP9TOOHrEmPKl6sfcNCJp9wqWkS:1bjboojQX3O0rE9l6skNCJpzS
Malware Config
Extracted
cobaltstrike
http://101.34.71.193:443/jquery-3.3.2.slim.min.js
-
user_agent
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://ikun.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) Host: 360.com
Targets
-
-
Target
5ab7d8d0e04526d8fc7cfd6db66aa8813c899388f39d2951ee9088661252309c
-
Size
9KB
-
MD5
40340686bd2e6b859b5fa3092e531632
-
SHA1
367b7e83256bfd48b74f83166f251ca799a83e9a
-
SHA256
5ab7d8d0e04526d8fc7cfd6db66aa8813c899388f39d2951ee9088661252309c
-
SHA512
ae597e1c062b3dd79e7cf160b6401b6f49734c88583a3d234754ad4d4d2749817684d932c4d8fbebe7a373d174aa1984abe056f302575cf91e000607098345b7
-
SSDEEP
192:+Rqd3PcxUjboojUf43iaK5dP9TOOHrEmPKl6sfcNCJp9wqWkS:1bjboojQX3O0rE9l6skNCJpzS
Score10/10-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
-