Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    payload.exe

  • Size

    72KB

  • MD5

    87e091c089a340ada55165c895294b69

  • SHA1

    8f255e44a86a4f3639e8a760a9b34330577f0032

  • SHA256

    02d27da054b4a2dcc87043ef2a3367192d1cf04e69f2e5453a56b75ae379e036

  • SHA512

    86cfbf58ea96532fa90fb3eeaacbbe9a59b90ce44ef9bcbafdc5c1c267eee77d07ba8f99130696d23af6da7ebfece50468ef5a83b715f64ce6e54e4687569dde

  • SSDEEP

    1536:IeHuvdXIXQuRP3SklWhM5cDr54Mb+KR0Nc8QsJq39:tq+XlcgcDrWe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://192.168.229.128:4444/0IwujDF71i564XvgHYvM9APLfQeplMaCMpZFUW-Zk

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • payload.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections