Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    5ab7d8d0e04526d8fc7cfd6db66aa8813c899388f39d2951ee9088661252309c

  • Size

    9KB

  • Sample

    231012-cnspwsaa8s

  • MD5

    40340686bd2e6b859b5fa3092e531632

  • SHA1

    367b7e83256bfd48b74f83166f251ca799a83e9a

  • SHA256

    5ab7d8d0e04526d8fc7cfd6db66aa8813c899388f39d2951ee9088661252309c

  • SHA512

    ae597e1c062b3dd79e7cf160b6401b6f49734c88583a3d234754ad4d4d2749817684d932c4d8fbebe7a373d174aa1984abe056f302575cf91e000607098345b7

  • SSDEEP

    192:+Rqd3PcxUjboojUf43iaK5dP9TOOHrEmPKl6sfcNCJp9wqWkS:1bjboojQX3O0rE9l6skNCJpzS

Malware Config

Extracted

Family

cobaltstrike

C2

http://101.34.71.193:443/jquery-3.3.2.slim.min.js

Attributes
  • user_agent

    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://ikun.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) Host: 360.com

Targets

    • Target

      5ab7d8d0e04526d8fc7cfd6db66aa8813c899388f39d2951ee9088661252309c

    • Size

      9KB

    • MD5

      40340686bd2e6b859b5fa3092e531632

    • SHA1

      367b7e83256bfd48b74f83166f251ca799a83e9a

    • SHA256

      5ab7d8d0e04526d8fc7cfd6db66aa8813c899388f39d2951ee9088661252309c

    • SHA512

      ae597e1c062b3dd79e7cf160b6401b6f49734c88583a3d234754ad4d4d2749817684d932c4d8fbebe7a373d174aa1984abe056f302575cf91e000607098345b7

    • SSDEEP

      192:+Rqd3PcxUjboojUf43iaK5dP9TOOHrEmPKl6sfcNCJp9wqWkS:1bjboojQX3O0rE9l6skNCJpzS

MITRE ATT&CK Matrix

Tasks