Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a223809a501a9490c5dd72c8378bd0aa.virus

  • Size

    72KB

  • MD5

    a223809a501a9490c5dd72c8378bd0aa

  • SHA1

    468997a2028015d6a10285394f7320bc23e39c63

  • SHA256

    a15c5e3b0c3d76a4248a8ee0462fe8b3a3d7c90de2092bb4f136830287518fba

  • SHA512

    3d9f1a74fbc5c75e70e73e5ff2b25b10b0254b504bd86499493bfb1c0a63fa1e7557600b8ddd8f8703be68eb5fbab1736d7b563956e6531248583bfc95468204

  • SSDEEP

    1536:IEIuUldO9O0er7RmF9HADhLf+g5nsMb+KR0Nc8QsJq39:ZOdB4RADoTe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.17:444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a223809a501a9490c5dd72c8378bd0aa.virus
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections