Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

18cc3e4bde...1N.exe

windows7-x64

10

18cc3e4bde...1N.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    105s
  • max time network
    113s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/11/2024, 04:01

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    18cc3e4bdec191c13868a582bd682c7891fb4f3e079ee3ed95543ac7026d67e1N.exe

  • Size

    7KB

  • MD5

    bfeebaa2940cd037df0b2265037f1110

  • SHA1

    d235f8b09e34f20ba84d7add2574088212680633

  • SHA256

    18cc3e4bdec191c13868a582bd682c7891fb4f3e079ee3ed95543ac7026d67e1

  • SHA512

    852e15b2138a0b11b6120928fbe9287ec9582f62ce8d83aeadd5bd8e7cfa0dd3364178d996d9246b479308578454c9c5708636b4242b33c152c5a1e897745a33

  • SSDEEP

    24:eFGStrJ9u0/6NqnZdkBQAVXD6Wc/qlKZq4QeNDMSCvOXpmB:is0oikBQq2ClaQSD9C2kB

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.88.133:8888

Signatures

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit
  • Metasploit family
    metasploit

Processes

  • C:\Users\Admin\AppData\Local\Temp\18cc3e4bdec191c13868a582bd682c7891fb4f3e079ee3ed95543ac7026d67e1N.exe
    "C:\Users\Admin\AppData\Local\Temp\18cc3e4bdec191c13868a582bd682c7891fb4f3e079ee3ed95543ac7026d67e1N.exe"
    1⤵
      PID:3428

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3428-0-0x0000000140000000-0x0000000140004278-memory.dmp

      Filesize

      16KB

      Download

    • memory/3428-1-0x0000000140000000-0x0000000140004278-memory.dmp

      Filesize

      16KB

      Download