Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
22/07/2024, 08:52
Static task
static1
Behavioral task
behavioral1
Sample
dd045c3d2bccfbf9dcff49844bb735450154b33d10441d8c485b05dda67f737d.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
dd045c3d2bccfbf9dcff49844bb735450154b33d10441d8c485b05dda67f737d.exe
Resource
win10v2004-20240709-en
General
-
Target
dd045c3d2bccfbf9dcff49844bb735450154b33d10441d8c485b05dda67f737d.exe
-
Size
19KB
-
MD5
7642f5eb4180fdf243390cdefd3e5dec
-
SHA1
e7010be0dfe7c64695607cf967cdbdbcb865bf49
-
SHA256
dd045c3d2bccfbf9dcff49844bb735450154b33d10441d8c485b05dda67f737d
-
SHA512
afb6651ead4868f0405db836f7df745023dbb5796adfb2a9a8bdead015e9517e885c981ab3287c94f9892e8737f712148a9f0ebe98de5015d5b9cc9ff8028b46
-
SSDEEP
192:aV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2Z1uaPWF8qa1Dojjgi:0qaCF31cix+Dc4zjUuauFF46gi
Malware Config
Extracted
cobaltstrike
http://10.66.112.11:80/uOIP
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; XBLWP7; ZuneWP7)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.