Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
147s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
05/12/2024, 08:17
General
-
Target
signtest_modified.exe
-
Size
842KB
-
MD5
998a29316c6bdbca22c0ba910f6dc5a6
-
SHA1
bccec1cef97bdd99f97e72e08a76a44684ab63ff
-
SHA256
9c5c6cb855ed93122f8582bdd7a83898062ab7867490598fa4fd507487f2e5a4
-
SHA512
7b8ea3b757291e3812bd9da942f97cf1cd368d3e8a80c9ef1028d06c6c028cae6195fac71ba92aa560039c14d97d349df582c2774e7505b310c235822092561e
-
SSDEEP
12288:EiV/9kuynK+Fo4qJ7whr+AAmspq037bREQpm+UnMAYRa5UKvIepkReuWYs/srvJX:EifkFS7Nrmso03FpwYsxvISkO/slvHf
Malware Config
Extracted
cobaltstrike
http://192.168.134.128:80/jquery-3.3.2.slim.min.js
-
user_agent
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36 Edg/129
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
-
Cobaltstrike family
Processes
-
C:\Users\Admin\AppData\Local\Temp\signtest_modified.exe"C:\Users\Admin\AppData\Local\Temp\signtest_modified.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.4MB
-
Filesize
4KB
-
Filesize
2.4MB