Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    827d5356f6808002403f1c8f7ac0bbf49468a23c4c5accc96a51a276b5bc510e.exe

  • Size

    72KB

  • MD5

    e618064e8faf8fdb27d92392bc2b05e1

  • SHA1

    aaf194b97191938ed055dfd367939c27d66001fb

  • SHA256

    827d5356f6808002403f1c8f7ac0bbf49468a23c4c5accc96a51a276b5bc510e

  • SHA512

    adb4c644c207d935c4a13dc0fc43c4ad4af21e0e2dd5ed367915a8228252133bb56634a8878174a16cee3757761f33c583ae04a904d679bac97f144078c28067

  • SSDEEP

    1536:I5ONZwH4iFYx8jTz0yKEdpCMb+KR0Nc8QsJq3/:gONuH4Cu83wyKE7Ce0Nc8QsC/

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.0.2.4:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 827d5356f6808002403f1c8f7ac0bbf49468a23c4c5accc96a51a276b5bc510e.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections