Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
95s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
11/07/2024, 00:28
Behavioral task
behavioral1
Sample
2024-07-11_6a0a4b7e6c7775cc2f3181c6e7b6d27c_cobalt-strike_cobaltstrike_poet-rat.exe
Resource
win7-20240708-en
9 signatures
150 seconds
General
-
Target
2024-07-11_6a0a4b7e6c7775cc2f3181c6e7b6d27c_cobalt-strike_cobaltstrike_poet-rat.exe
-
Size
6.0MB
-
MD5
6a0a4b7e6c7775cc2f3181c6e7b6d27c
-
SHA1
e34a00df5c20b8933c2ed5bb575cd3d6b6e5ab93
-
SHA256
092b160448387e297c5ea294c145efb629916c3fcdda66d7bd72bbea07eadf51
-
SHA512
ef5537834ea6db38865d30357df3f9bed5773e62ee9ad104347e5ecb9e412e75002cd7276aacf105e709b3a0a9259c6d5889bb4335edb420f15d710668c23d94
-
SSDEEP
98304:EniLf9FdfE0pZB156utgpPFotBER/mQ32lUH:eOl56utgpPF8u/7H
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule behavioral2/memory/4220-0-0x00007FF60CC50000-0x00007FF60CFA4000-memory.dmp xmrig -
resource yara_rule behavioral2/memory/4220-0-0x00007FF60CC50000-0x00007FF60CFA4000-memory.dmp upx