Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
fbbef0b379a3690dc1d073327eaa62e0561fc5f8860cb4c4e33a3eb9d68ec984
-
Size
8.7MB
-
Sample
231220-nks22adfdn
-
MD5
4fe7e0d63460bfacd57ff736d77fef91
-
SHA1
32696d69847dcce049e0e29f7823a5c29881bf47
-
SHA256
fbbef0b379a3690dc1d073327eaa62e0561fc5f8860cb4c4e33a3eb9d68ec984
-
SHA512
c6c376ae42083cb4e821d8a94f7f51f3a41884c00556c566873bc64b039cb3dce96fdd52d11c930af4a6b1027cb9dbc4ea1714eb6f046dbb2ba5c0553ca56b77
-
SSDEEP
196608:K9LaAXJHpDVL2Vmd6+DKMTNfwZHYYhyt33CLnyTfj10:QxJJDVL2Vmd6mKMBkKnCLW
Behavioral task
behavioral1
Sample
fbbef0b379a3690dc1d073327eaa62e0561fc5f8860cb4c4e33a3eb9d68ec984.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
fbbef0b379a3690dc1d073327eaa62e0561fc5f8860cb4c4e33a3eb9d68ec984.exe
Resource
win10v2004-20231215-en
Malware Config
Extracted
cobaltstrike
http://192.168.0.104:805/RSlL
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; InfoPath.2)
Targets
-
-
Target
fbbef0b379a3690dc1d073327eaa62e0561fc5f8860cb4c4e33a3eb9d68ec984
-
Size
8.7MB
-
MD5
4fe7e0d63460bfacd57ff736d77fef91
-
SHA1
32696d69847dcce049e0e29f7823a5c29881bf47
-
SHA256
fbbef0b379a3690dc1d073327eaa62e0561fc5f8860cb4c4e33a3eb9d68ec984
-
SHA512
c6c376ae42083cb4e821d8a94f7f51f3a41884c00556c566873bc64b039cb3dce96fdd52d11c930af4a6b1027cb9dbc4ea1714eb6f046dbb2ba5c0553ca56b77
-
SSDEEP
196608:K9LaAXJHpDVL2Vmd6+DKMTNfwZHYYhyt33CLnyTfj10:QxJJDVL2Vmd6mKMBkKnCLW
Score10/10-
Loads dropped DLL
-