Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    c3312adfd932b806a746e503b42b4326b7dee2bc69400001663b18921f91c485

  • Size

    834KB

  • Sample

    240821-fpndcavcqk

  • MD5

    6bb619d8bb5db73f63019ecf8fc71392

  • SHA1

    6edec42a9bd43e7c56520211d9afe6e21a29f87a

  • SHA256

    c3312adfd932b806a746e503b42b4326b7dee2bc69400001663b18921f91c485

  • SHA512

    dd6e4f795077cf894c4948aba483c572e268e49802802e3cfc836d98c6b6dc9a91cdca9cba47a369927700d505406ef0cfb90261486dd2be02d7ac9553ffec03

  • SSDEEP

    12288:IBhA3SfDkVs+k3mI62ATai/QqzlFCl7yZVrLnJtZsbTTeIhcUseLY+jRY:aiifDk0/AT71Cl7UpsX2UsoJF

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.143:4437

Targets

    • Target

      c3312adfd932b806a746e503b42b4326b7dee2bc69400001663b18921f91c485

    • Size

      834KB

    • MD5

      6bb619d8bb5db73f63019ecf8fc71392

    • SHA1

      6edec42a9bd43e7c56520211d9afe6e21a29f87a

    • SHA256

      c3312adfd932b806a746e503b42b4326b7dee2bc69400001663b18921f91c485

    • SHA512

      dd6e4f795077cf894c4948aba483c572e268e49802802e3cfc836d98c6b6dc9a91cdca9cba47a369927700d505406ef0cfb90261486dd2be02d7ac9553ffec03

    • SSDEEP

      12288:IBhA3SfDkVs+k3mI62ATai/QqzlFCl7yZVrLnJtZsbTTeIhcUseLY+jRY:aiifDk0/AT71Cl7UpsX2UsoJF

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks