Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    58738ab8350cece1f75e80d84152ca26433578c75add6e2f355d2aa8491ea7dc

  • Size

    1.3MB

  • Sample

    240729-q59lmavhja

  • MD5

    a9f2f6382c9c03be9a78c179970711a8

  • SHA1

    b79458a5f7359585c413defc04fb12155c3ca2ff

  • SHA256

    58738ab8350cece1f75e80d84152ca26433578c75add6e2f355d2aa8491ea7dc

  • SHA512

    2809d0b96445638acd5eb0a839c1e28aad2b58d551751933eecc85f29196ef4749996d1e36cbce6777a2dd824ef73a732f87307924f9d1a8cde0025b05e39a70

  • SSDEEP

    12288:P+J7RCnEVyvTNMy8jw63W6wKN0XeETm6yKzj05MyE6cxRg2V0vaESpoLujydh77t:PQ7Y1TNMXWnuEdNyQsgByj7ee

Malware Config

Extracted

Family

cobaltstrike

C2

http://43.143.198.113:4567/mq2M

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0; BOIE9;ENUS)

Targets

    • Target

      58738ab8350cece1f75e80d84152ca26433578c75add6e2f355d2aa8491ea7dc

    • Size

      1.3MB

    • MD5

      a9f2f6382c9c03be9a78c179970711a8

    • SHA1

      b79458a5f7359585c413defc04fb12155c3ca2ff

    • SHA256

      58738ab8350cece1f75e80d84152ca26433578c75add6e2f355d2aa8491ea7dc

    • SHA512

      2809d0b96445638acd5eb0a839c1e28aad2b58d551751933eecc85f29196ef4749996d1e36cbce6777a2dd824ef73a732f87307924f9d1a8cde0025b05e39a70

    • SSDEEP

      12288:P+J7RCnEVyvTNMy8jw63W6wKN0XeETm6yKzj05MyE6cxRg2V0vaESpoLujydh77t:PQ7Y1TNMXWnuEdNyQsgByj7ee

MITRE ATT&CK Matrix

Tasks