Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

c77b40c61b...18.exe

windows7-x64

10

c77b40c61b...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c77b40c61bd46d518f8e7f0542e420d9_JaffaCakes118

  • Size

    820KB

  • Sample

    240828-xyabhs1gla

  • MD5

    c77b40c61bd46d518f8e7f0542e420d9

  • SHA1

    9275940eae470cd25f79aa04fcb18912989ddd76

  • SHA256

    fec7ac144cceeecaf12ca5ed7258bb20e3fe64cbd9db191241956ad0372af2e5

  • SHA512

    4f1a14b8bf46a6c7bc32dca838b348be33b5c6dda62af890347dc072f79c1539fb3dbe4e73209364365f4d1eb8685dc569b649a6307f7232ca6c1573eb237648

  • SSDEEP

    3072:VAIJPZgN3dG/Np+ahhFI+6iNkoYn+jofzk:VAIJ6dG14aWoBY+s4

Score
10/10
metasploitbackdoordiscoverytrojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://217.12.218.199:80/JmXM

Attributes
  • headers User-Agent: Mozilla/5.0 (compatible, MSIE 11, Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko

Targets

    • Target

      c77b40c61bd46d518f8e7f0542e420d9_JaffaCakes118

    • Size

      820KB

    • MD5

      c77b40c61bd46d518f8e7f0542e420d9

    • SHA1

      9275940eae470cd25f79aa04fcb18912989ddd76

    • SHA256

      fec7ac144cceeecaf12ca5ed7258bb20e3fe64cbd9db191241956ad0372af2e5

    • SHA512

      4f1a14b8bf46a6c7bc32dca838b348be33b5c6dda62af890347dc072f79c1539fb3dbe4e73209364365f4d1eb8685dc569b649a6307f7232ca6c1573eb237648

    • SSDEEP

      3072:VAIJPZgN3dG/Np+ahhFI+6iNkoYn+jofzk:VAIJ6dG14aWoBY+s4

    Score
    10/10
    metasploitbackdoordiscoverytrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks