Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    7582a9945e4d4b9ddfcfadfae7a82faa642eaeb573541d643f8052a4aef22b7dN.exe

  • Size

    1.1MB

  • Sample

    250121-eghmfsvqbv

  • MD5

    54241b7f22fd2ddc71d99dd08436a4c0

  • SHA1

    3b83e6f2fb9aba1c099931486315d20efb7944c4

  • SHA256

    7582a9945e4d4b9ddfcfadfae7a82faa642eaeb573541d643f8052a4aef22b7d

  • SHA512

    aa480ff08d85ee9dc4fb8bb611a3ae3d1e9af789c94b649ec7c8f3370b1f833d5e0c55533f2eb9d61504794232c89439c1fcaeb1655cd143f632bf5e7feee0de

  • SSDEEP

    24576:8B3IlCzeFhW8MpZAQ9mV93t7Tz4/8/B/rBQ2Pfs3e3tP:8B4lseFBQwV93t3z48/BjBQ2Pfs3e3tP

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

10.23.96.244:4444

Targets

    • Target

      7582a9945e4d4b9ddfcfadfae7a82faa642eaeb573541d643f8052a4aef22b7dN.exe

    • Size

      1.1MB

    • MD5

      54241b7f22fd2ddc71d99dd08436a4c0

    • SHA1

      3b83e6f2fb9aba1c099931486315d20efb7944c4

    • SHA256

      7582a9945e4d4b9ddfcfadfae7a82faa642eaeb573541d643f8052a4aef22b7d

    • SHA512

      aa480ff08d85ee9dc4fb8bb611a3ae3d1e9af789c94b649ec7c8f3370b1f833d5e0c55533f2eb9d61504794232c89439c1fcaeb1655cd143f632bf5e7feee0de

    • SSDEEP

      24576:8B3IlCzeFhW8MpZAQ9mV93t7Tz4/8/B/rBQ2Pfs3e3tP:8B4lseFBQwV93t3z48/BjBQ2Pfs3e3tP

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    • Metasploit family

MITRE ATT&CK Matrix

Tasks