Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
145s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
01/02/2024, 12:01
Behavioral task
behavioral1
Sample
2024-02-01_9c2311561efe40fd8c2d4bd494c435b4_cobalt-strike_cobaltstrike.exe
Resource
win7-20231215-en
11 signatures
150 seconds
General
-
Target
2024-02-01_9c2311561efe40fd8c2d4bd494c435b4_cobalt-strike_cobaltstrike.exe
-
Size
6.0MB
-
MD5
9c2311561efe40fd8c2d4bd494c435b4
-
SHA1
b9166baa23f5333afcfba776e2f8cf453411950e
-
SHA256
6d8a6d77f44742c3682e16654e69a00f2ec19f085e2f5ce2c71fc8c19dcdbe63
-
SHA512
f1ea782343e8449a2e46744514a4e1073d29ec130364f72da749573be4c0bd571de7d02797b5e33dffd4926c85ff1a387a1940a0b0810eb2f9f602d65459042b
-
SSDEEP
98304:EniLf9FdfE0pZB156utgpPFotBER/mQ32lUu:eOl56utgpPF8u/7u
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule behavioral2/memory/3600-0-0x00007FF704360000-0x00007FF7046B4000-memory.dmp UPX -
XMRig Miner payload 1 IoCs
resource yara_rule behavioral2/memory/3600-0-0x00007FF704360000-0x00007FF7046B4000-memory.dmp xmrig -
resource yara_rule behavioral2/memory/3600-0-0x00007FF704360000-0x00007FF7046B4000-memory.dmp upx