Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2a7bc1d5b291e31d10b1d1a4545be3e67e3dceec79f0dd44c6d86a36735a8633N.exe

  • Size

    72KB

  • Sample

    240926-ptfnqsxdnj

  • MD5

    797fc624fba6bd4df9557636189d2210

  • SHA1

    00aceba87b238f4f3319bc713698f3e03a455e64

  • SHA256

    2a7bc1d5b291e31d10b1d1a4545be3e67e3dceec79f0dd44c6d86a36735a8633

  • SHA512

    b98d656842f4b1507ba567bd9918097983dd9fac9f51460a3d2eeb42e195a911966b3d1494e0a66b937950ebdbae0ffac40e032069adb9fabf73d3ec133cb8bb

  • SSDEEP

    1536:I5qXRrf3Q+POrm1bxbJa4Mb+KR0Nc8QsJq39:QqXlQ+zbxble0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.226.138:443

Targets

    • Target

      2a7bc1d5b291e31d10b1d1a4545be3e67e3dceec79f0dd44c6d86a36735a8633N.exe

    • Size

      72KB

    • MD5

      797fc624fba6bd4df9557636189d2210

    • SHA1

      00aceba87b238f4f3319bc713698f3e03a455e64

    • SHA256

      2a7bc1d5b291e31d10b1d1a4545be3e67e3dceec79f0dd44c6d86a36735a8633

    • SHA512

      b98d656842f4b1507ba567bd9918097983dd9fac9f51460a3d2eeb42e195a911966b3d1494e0a66b937950ebdbae0ffac40e032069adb9fabf73d3ec133cb8bb

    • SSDEEP

      1536:I5qXRrf3Q+POrm1bxbJa4Mb+KR0Nc8QsJq39:QqXlQ+zbxble0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks