Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    21/09/2024, 10:30

General

  • Target

    51e1d66b652f03b7ab78c89888d38a0818e3b25fb8ae16b8903d0c54cdd3a145.dll

  • Size

    67KB

  • MD5

    2a3c2f6abd22844aee54fdcd2ddd74f4

  • SHA1

    0a3cc50d887bbd5c82486ce8d41e16991cf4e8bd

  • SHA256

    51e1d66b652f03b7ab78c89888d38a0818e3b25fb8ae16b8903d0c54cdd3a145

  • SHA512

    8a6a3ac8183751389a91bbcc83e909d1a828c99cbb10e6b9d3a472392b1a383006b4ee18a8b0d407bbe85cd11b7d2fd28ece149b67ca7c50dfaf19a36f13303e

  • SSDEEP

    384:/LEcVr8jTdbcyIII/c5Q4qmvwLCuaWCzRMTj+6bQfBXF+nnpBqXbjdCPjhL:/LEfbcXzmR+SBsnjgbjgP

Malware Config

Extracted

Family

cobaltstrike

C2

http://106.15.3.99:80/nHCd

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.1)

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\51e1d66b652f03b7ab78c89888d38a0818e3b25fb8ae16b8903d0c54cdd3a145.dll,#1
    1⤵
      PID:2432

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2432-1-0x000007FEF6800000-0x000007FEF6827000-memory.dmp

      Filesize

      156KB

    • memory/2432-2-0x000007FEF67D0000-0x000007FEF67F7000-memory.dmp

      Filesize

      156KB

    • memory/2432-0-0x000007FEF6800000-0x000007FEF6827000-memory.dmp

      Filesize

      156KB