Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a0260dab1ad76595f672b2e1b6ab90e430afbf52f06881ddfce0d6825fd6654d

  • Size

    258KB

  • Sample

    241205-m4xzna1pct

  • MD5

    b101a090603d142f740158e945edba6e

  • SHA1

    4785a888f57be813f32e124dbb67fdbd4273f8f4

  • SHA256

    a0260dab1ad76595f672b2e1b6ab90e430afbf52f06881ddfce0d6825fd6654d

  • SHA512

    fddf53ac38d74021451c081e732d5026a5f1d28df0170fcd96c858b393a714d8e73f59bbfbd819b87432fdf1914296bd64718e51a79fcc8f461dd8e898351f85

  • SSDEEP

    6144:lv0TIJu+3GXNHTM9gaxRTKp9dm2ua7jZiX+pJLh6:qTf+2dzMe2Kua7MX+r6

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.239.129:17822/HyXC

Attributes
  • headers User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; yie9)

Targets

    • Target

      a0260dab1ad76595f672b2e1b6ab90e430afbf52f06881ddfce0d6825fd6654d

    • Size

      258KB

    • MD5

      b101a090603d142f740158e945edba6e

    • SHA1

      4785a888f57be813f32e124dbb67fdbd4273f8f4

    • SHA256

      a0260dab1ad76595f672b2e1b6ab90e430afbf52f06881ddfce0d6825fd6654d

    • SHA512

      fddf53ac38d74021451c081e732d5026a5f1d28df0170fcd96c858b393a714d8e73f59bbfbd819b87432fdf1914296bd64718e51a79fcc8f461dd8e898351f85

    • SSDEEP

      6144:lv0TIJu+3GXNHTM9gaxRTKp9dm2ua7jZiX+pJLh6:qTf+2dzMe2Kua7MX+r6

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Matrix

Tasks