Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

7595cec234...d9.exe

windows7-x64

1

7595cec234...d9.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7595cec2344e02ecf02e3e1a40b04534152ad136a1cd935a5fbe58fbd362aad9

  • Size

    1.2MB

  • MD5

    00682ac3012f23776742b06b7589cdcc

  • SHA1

    13abb0fb3323827e97fb591823c63ecfd0ea57ad

  • SHA256

    7595cec2344e02ecf02e3e1a40b04534152ad136a1cd935a5fbe58fbd362aad9

  • SHA512

    6973d522f2867119340c36c4723f136ee07678ebf4821dea049b140302913731246169ceb27595652b0b1a0befce4d206e9cc8ad3554c049e6ed3f9c0cc2dcb0

  • SSDEEP

    12288:KS8V9ZKmDgYQbb825BsHqn4Kxm8OVQgjgfoKWF1qY2iZ/FiQ3lh1:EDDgYQZsvVQgjgfoKWpZdiQ3D1

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://8.130.96.100:8443/nPi6

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7595cec2344e02ecf02e3e1a40b04534152ad136a1cd935a5fbe58fbd362aad9
    .exe windows:6 windows x64 arch:x64

    9cbefe68f395e67356e2a5d8d1b285c0


    Headers

    Imports

    Sections