Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
93s -
max time network
108s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
27/09/2024, 06:04
Behavioral task
behavioral1
Sample
25aaecb70f0a09fd818f459bc0c989d12706778c7515e3fab0ea49c27e4a0fb9.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
25aaecb70f0a09fd818f459bc0c989d12706778c7515e3fab0ea49c27e4a0fb9.exe
Resource
win10v2004-20240802-en
General
-
Target
25aaecb70f0a09fd818f459bc0c989d12706778c7515e3fab0ea49c27e4a0fb9.exe
-
Size
23KB
-
MD5
439250a1b24166a010c7658a24bf800e
-
SHA1
c86f61d42baa3241edfb4170c8af697eaa3bc87e
-
SHA256
25aaecb70f0a09fd818f459bc0c989d12706778c7515e3fab0ea49c27e4a0fb9
-
SHA512
34d776abe70c39090c8be3555a57135f2d5c634de1ac22152053a7c92c1d2e987925c2c30680c2d82ab231d15d8f3dd0631511183b820a855a09b9c53c2e3eb4
-
SSDEEP
384:SJmann0my70gXc5UgOHiPX236BYtzLOZK+c+o/4/cKpFFZid77FFAsy:SQa0f7EU7m24GzLXBw0KpnZypy
Malware Config
Extracted
cobaltstrike
http://206.166.251.28:80/k2Pp
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; BOIE9;ENUS)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.