Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    4a41cd75a70293b96f180e9edd85c9c9d987d38b627a872c32545125abcbc9aa

  • Size

    72KB

  • Sample

    240916-zqra6szakc

  • MD5

    9e3890f6067bb98908ff53aab344e019

  • SHA1

    1c423abef8ec3c3edadb1de90a0221bc9aa36f23

  • SHA256

    4a41cd75a70293b96f180e9edd85c9c9d987d38b627a872c32545125abcbc9aa

  • SHA512

    82949db4a439d090e064fe5472d3443218a441f49dddf52615fcc7b75b012d77b68f3ffc05ee9a2e04419651ecdbd217ed9eb9e7d326df92fbdf9248ff821b98

  • SSDEEP

    1536:IvxvoLU6FQp+8je+MV+dSIM7Mb+KR0Nc8QsJq39:mxXzo8Sn7e0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

236.90.203.2:42971

Extracted

Family

metasploit

Version

encoder/fnstenv_mov

Targets

    • Target

      4a41cd75a70293b96f180e9edd85c9c9d987d38b627a872c32545125abcbc9aa

    • Size

      72KB

    • MD5

      9e3890f6067bb98908ff53aab344e019

    • SHA1

      1c423abef8ec3c3edadb1de90a0221bc9aa36f23

    • SHA256

      4a41cd75a70293b96f180e9edd85c9c9d987d38b627a872c32545125abcbc9aa

    • SHA512

      82949db4a439d090e064fe5472d3443218a441f49dddf52615fcc7b75b012d77b68f3ffc05ee9a2e04419651ecdbd217ed9eb9e7d326df92fbdf9248ff821b98

    • SSDEEP

      1536:IvxvoLU6FQp+8je+MV+dSIM7Mb+KR0Nc8QsJq39:mxXzo8Sn7e0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks