Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

Organiser.exe

windows7-x64

10

Organiser.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ecf22c8c16b15a98870461efb0dea42630f77f9d1863baf83164ea9e86c3cf0e

  • Size

    43KB

  • MD5

    720eae293ceec4c08e0fda8e120b87e8

  • SHA1

    1c6816b518c3fc3c2e206f2daf062409e7e20731

  • SHA256

    ecf22c8c16b15a98870461efb0dea42630f77f9d1863baf83164ea9e86c3cf0e

  • SHA512

    f96b7a8946157fa46001566963700fe6ed58c7566ea7ab0351efa52259a37933a55ba7b83d07a87584f23c3f722de8b5f4e341c9cb0a4f71fd3de5968d399f86

  • SSDEEP

    768:8HPvmLubpZy/RjGrFrFdDZO6+Aubkj21Ht96pKLY4vG7rhWLfnbuxIFj849FwXwn:8HPvmLube5jGBnZCDUKLlG7rOt8kFL

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://89.197.154.116:7810/dDmZLRctSF-O2Y_Y6DNv7gGR1g00Lo-DSbAP10Qhyakl6e3RBIKZx4eGRNsN-6iE5mPtUWD3pQadMjciytVqzPL

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ecf22c8c16b15a98870461efb0dea42630f77f9d1863baf83164ea9e86c3cf0e
    .zip

    Password: infected

  • Organiser.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections