Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
95s -
max time network
98s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
15/09/2024, 09:57
Behavioral task
behavioral1
Sample
2024-09-15_5bd6569ee81e9e7f11a923bb02030715_cobalt-strike_cobaltstrike_poet-rat.exe
Resource
win7-20240903-en
9 signatures
150 seconds
General
-
Target
2024-09-15_5bd6569ee81e9e7f11a923bb02030715_cobalt-strike_cobaltstrike_poet-rat.exe
-
Size
6.1MB
-
MD5
5bd6569ee81e9e7f11a923bb02030715
-
SHA1
41b77b270d71fe12bc7e235a203f9893d08a400d
-
SHA256
6d893a05b85cf5df4245dfc6be15a2f3a9bf1564633bcd8ec4d47b1151fc026d
-
SHA512
09091abb55bb1a2f1b869be8213683f51f0da77857eb410779dad3b63ca5f833de057d80bfd7e1e3eac2cf318e12c49f45f56fa0426be02cdd8b6d2a51dd4de9
-
SSDEEP
98304:EniLf9FdfE0pZB156utgpPFotBER/mQ32lUa:eOl56utgpPF8u/7a
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule behavioral2/memory/4788-0-0x00007FF730C30000-0x00007FF730F84000-memory.dmp xmrig -
resource yara_rule behavioral2/memory/4788-0-0x00007FF730C30000-0x00007FF730F84000-memory.dmp upx