Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    reverse.exe

  • Size

    72KB

  • Sample

    231012-djqkeaea34

  • MD5

    d0159349934aeb698f8c74f0f105ad82

  • SHA1

    66135c4184120f051719a470336edb49caa3dcc1

  • SHA256

    a12f989c4d2259bd58487c97cd17fe3d36b2bd91d4a0ace9f3dd07cb8f8dd686

  • SHA512

    10477dd83299ba070dcea1024115b42e69ac2ae3c320a2967f1cf5367c23f1bbea0762222b562245a960f38ea5859822f2f1fdf91516d6730c2e84d6f1c43b98

  • SSDEEP

    1536:IgAP1X5Wr628C6KZq9e8Mb+KR0Nc8QsJq39:XAP/W22DY9e8e0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

34.142.247.189:4444

Targets

    • Target

      reverse.exe

    • Size

      72KB

    • MD5

      d0159349934aeb698f8c74f0f105ad82

    • SHA1

      66135c4184120f051719a470336edb49caa3dcc1

    • SHA256

      a12f989c4d2259bd58487c97cd17fe3d36b2bd91d4a0ace9f3dd07cb8f8dd686

    • SHA512

      10477dd83299ba070dcea1024115b42e69ac2ae3c320a2967f1cf5367c23f1bbea0762222b562245a960f38ea5859822f2f1fdf91516d6730c2e84d6f1c43b98

    • SSDEEP

      1536:IgAP1X5Wr628C6KZq9e8Mb+KR0Nc8QsJq39:XAP/W22DY9e8e0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks