Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    42710df7d572082524e742e5e4f3cab0.exe

  • Size

    72KB

  • Sample

    240818-pqdd7stdje

  • MD5

    42710df7d572082524e742e5e4f3cab0

  • SHA1

    21abbff0c148012f3863bfcd1dae294c8bc7ec34

  • SHA256

    3c7765451ee006387b6367e75c7a53c2b4e2ad5639ae27ef80755b11a4123fac

  • SHA512

    2eed026168142055d30fbbe5c7c8bcfa43522f82b8b6e8bf795659d3e91c4634ccb557a0a6524256d307e74abc2e3ac4d474dc1f618450d6a71a37d8a2118779

  • SSDEEP

    1536:IQtHHoS+Fu9A+TsSS90ZnWRvJUTqUMb+KR0Nc8QsJq39:Ttnlq+YSSSZWrUje0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://193.117.208.148:7800/1sAlSsmgreaS9pP39pDPpwYXP0ppjf7b1UPWY86vufbNAEQ7bBpEMZe3lnZgqbATX2algo_pt1efTeA6oovW7

Targets

    • Target

      42710df7d572082524e742e5e4f3cab0.exe

    • Size

      72KB

    • MD5

      42710df7d572082524e742e5e4f3cab0

    • SHA1

      21abbff0c148012f3863bfcd1dae294c8bc7ec34

    • SHA256

      3c7765451ee006387b6367e75c7a53c2b4e2ad5639ae27ef80755b11a4123fac

    • SHA512

      2eed026168142055d30fbbe5c7c8bcfa43522f82b8b6e8bf795659d3e91c4634ccb557a0a6524256d307e74abc2e3ac4d474dc1f618450d6a71a37d8a2118779

    • SSDEEP

      1536:IQtHHoS+Fu9A+TsSS90ZnWRvJUTqUMb+KR0Nc8QsJq39:Ttnlq+YSSSZWrUje0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks