Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
14/10/2023, 13:57
Static task
static1
Behavioral task
behavioral1
Sample
0601496bd5fb832f878283c3c09624dc47fb68533dd2c0fde530275a7cb6f776.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
0601496bd5fb832f878283c3c09624dc47fb68533dd2c0fde530275a7cb6f776.exe
Resource
win10v2004-20230915-en
General
-
Target
0601496bd5fb832f878283c3c09624dc47fb68533dd2c0fde530275a7cb6f776.exe
-
Size
19KB
-
MD5
8b6ede96a0812ccf78f2c438af184837
-
SHA1
653fbb999f856ed57faa82a46e7b019867274ff5
-
SHA256
0601496bd5fb832f878283c3c09624dc47fb68533dd2c0fde530275a7cb6f776
-
SHA512
54102401c83aa6bf5ddcd7dad8609ea039c2757962ecdab338950842b5b412e3e2c13454bbc3fb36311be18a0773bfc7a054101d3228e9cb3084f83e6ee3c5f4
-
SSDEEP
192:DV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/202kX5s6WF8qa1Dojjgi:tqaCF31cix+Dc4zjdrsjFF46gi
Malware Config
Extracted
cobaltstrike
http://101.37.12.194:60032/NalB
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; MALNJS)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.