Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8f88dccdce150b03d8cf97df7819ede790b0b787ff4929335c5ba478e23e3a6e

  • Size

    17KB

  • Sample

    240608-wh9k1aea61

  • MD5

    4c0deb28ba6ff90d8dcd8113b494442b

  • SHA1

    372bbc94c30a32fbf71c0d8749bcaf435dc469c3

  • SHA256

    8f88dccdce150b03d8cf97df7819ede790b0b787ff4929335c5ba478e23e3a6e

  • SHA512

    5a142c8d987445b339f4d13b94d20b5c27daa927e70ab2cb3bdecf214619ad28c115ee0df61dfed447541f88fb302846c270a17261275d80d2c24ed01d42dc92

  • SSDEEP

    192:dDMAe4Ckj19RZZ6wpSfu1bKcq5uHj7khBDSeKNH4BZXHth/oBUbOj6kxiY:dDMAoKz6WtKEj7aBDieZngbAY

Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://47.100.180.123:3005/BflI

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)

Targets

    • Target

      8f88dccdce150b03d8cf97df7819ede790b0b787ff4929335c5ba478e23e3a6e

    • Size

      17KB

    • MD5

      4c0deb28ba6ff90d8dcd8113b494442b

    • SHA1

      372bbc94c30a32fbf71c0d8749bcaf435dc469c3

    • SHA256

      8f88dccdce150b03d8cf97df7819ede790b0b787ff4929335c5ba478e23e3a6e

    • SHA512

      5a142c8d987445b339f4d13b94d20b5c27daa927e70ab2cb3bdecf214619ad28c115ee0df61dfed447541f88fb302846c270a17261275d80d2c24ed01d42dc92

    • SSDEEP

      192:dDMAe4Ckj19RZZ6wpSfu1bKcq5uHj7khBDSeKNH4BZXHth/oBUbOj6kxiY:dDMAoKz6WtKEj7aBDieZngbAY

    Score
    10/10
    cobaltstrikebackdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks