Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

1f1b44982a...84.exe

windows7-x64

10

1f1b44982a...84.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1f1b44982a8340e3d06b60a75d44a154851736f8667681c46aab35741e8dc684

  • Size

    19KB

  • Sample

    240221-bzw11shb71

  • MD5

    bbf0b5778af5f82efe5bc4528825e488

  • SHA1

    6af8ed2a7d8ff26bbd5856a5b4ca6eafe71343e4

  • SHA256

    1f1b44982a8340e3d06b60a75d44a154851736f8667681c46aab35741e8dc684

  • SHA512

    8f02f9670e296a160ffeacda1d8fa190401f020ef5a045e8021cc23cc39be6a3f913b92e3c1e4343d7c9ea22c8690ad2764c301b54fc79a928267d46aa91edd2

  • SSDEEP

    192:NV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/20GZS1L0WF8qa1Dojjgi:/qaCF31cix+Dc4zj0IRBFF46gi

Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://47.109.99.240:8080/AbRh

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; BOIE9;ENUSMSE)

Targets

    • Target

      1f1b44982a8340e3d06b60a75d44a154851736f8667681c46aab35741e8dc684

    • Size

      19KB

    • MD5

      bbf0b5778af5f82efe5bc4528825e488

    • SHA1

      6af8ed2a7d8ff26bbd5856a5b4ca6eafe71343e4

    • SHA256

      1f1b44982a8340e3d06b60a75d44a154851736f8667681c46aab35741e8dc684

    • SHA512

      8f02f9670e296a160ffeacda1d8fa190401f020ef5a045e8021cc23cc39be6a3f913b92e3c1e4343d7c9ea22c8690ad2764c301b54fc79a928267d46aa91edd2

    • SSDEEP

      192:NV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/20GZS1L0WF8qa1Dojjgi:/qaCF31cix+Dc4zj0IRBFF46gi

    Score
    10/10
    cobaltstrikebackdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks