Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    8ebd06f68166f3edbf00d2f39e5e29cc91e6bd973d64c9f1f9e5f2dc622a569f

  • Size

    72KB

  • Sample

    240727-aykqxsybmc

  • MD5

    65db5a5d8ca940f3fe9d80230bc58b23

  • SHA1

    694d104def6ee5f403c2c2e9f259c1a8613f0a3c

  • SHA256

    8ebd06f68166f3edbf00d2f39e5e29cc91e6bd973d64c9f1f9e5f2dc622a569f

  • SHA512

    1818eab267a0153ff6fbdc161017660ec7c2175f89998c414ee0777125e537f69b8ceef49a0586aa02f8fa79c65a317a90161ccb0517050423b611c64aad9cca

  • SSDEEP

    1536:I4WNwd4qnHjUv3lznkw5DC6+SedMb+KR0Nc8QsJq39:Fv+qnHjChl+Sede0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

185.208.158.203:4444

Targets

    • Target

      8ebd06f68166f3edbf00d2f39e5e29cc91e6bd973d64c9f1f9e5f2dc622a569f

    • Size

      72KB

    • MD5

      65db5a5d8ca940f3fe9d80230bc58b23

    • SHA1

      694d104def6ee5f403c2c2e9f259c1a8613f0a3c

    • SHA256

      8ebd06f68166f3edbf00d2f39e5e29cc91e6bd973d64c9f1f9e5f2dc622a569f

    • SHA512

      1818eab267a0153ff6fbdc161017660ec7c2175f89998c414ee0777125e537f69b8ceef49a0586aa02f8fa79c65a317a90161ccb0517050423b611c64aad9cca

    • SSDEEP

      1536:I4WNwd4qnHjUv3lznkw5DC6+SedMb+KR0Nc8QsJq39:Fv+qnHjChl+Sede0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks