Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

sample.tar

windows7-x64

1

sample.tar

windows10-2004-x64

8

arsenal-ki...kit.sh

ubuntu-18.04-amd64

3

arsenal-ki...kit.sh

debian-9-armhf

3

arsenal-ki...kit.sh

debian-9-mips

3

arsenal-ki...kit.sh

debian-9-mipsel

3

arsenal-ki...ild.sh

ubuntu-18.04-amd64

1

arsenal-ki...ild.sh

debian-9-armhf

1

arsenal-ki...ild.sh

debian-9-mips

1

arsenal-ki...ild.sh

debian-9-mipsel

1

arsenal-ki...ild.sh

ubuntu-18.04-amd64

1

arsenal-ki...ild.sh

debian-9-armhf

1

arsenal-ki...ild.sh

debian-9-mips

1

arsenal-ki...ild.sh

debian-9-mipsel

1

arsenal-ki...64.dll

windows7-x64

1

arsenal-ki...64.dll

windows10-2004-x64

8

arsenal-ki...86.dll

windows7-x64

3

arsenal-ki...86.dll

windows10-2004-x64

8

arsenal-ki...64.dll

windows7-x64

1

arsenal-ki...64.dll

windows10-2004-x64

8

arsenal-ki...86.dll

windows7-x64

3

arsenal-ki...86.dll

windows10-2004-x64

8

arsenal-ki...64.dll

windows7-x64

1

arsenal-ki...64.dll

windows10-2004-x64

8

arsenal-ki...86.dll

windows7-x64

3

arsenal-ki...86.dll

windows10-2004-x64

8

arsenal-ki...64.dll

windows7-x64

1

arsenal-ki...64.dll

windows10-2004-x64

arsenal-ki...86.dll

windows7-x64

3

arsenal-ki...86.dll

windows10-2004-x64

8

arsenal-ki...tor.sh

ubuntu-18.04-amd64

1

arsenal-ki...tor.sh

debian-9-armhf

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    arsenal-kit20240125.tgz

  • Size

    3.0MB

  • MD5

    b6b8000d3de1c6b050be5ea9513fc81d

  • SHA1

    aa5aff54e1a1256428ef401e5c8ecb9bba25c08a

  • SHA256

    c2e1ba266aa158636ea3470ba6ab7084bb65d6811131c550d8c6357ca0bbaedd

  • SHA512

    621ddb1c1fa8e6e9a7b795df72159cd455916e90b14aa0afef1e2e430c5dd5f3623712e010027c55eaf566176ce1dd3587f90bcca80a1da90a12d10ce87134d4

  • SSDEEP

    49152:iBKJP4orMdFAobmCaVhoZ2gmfDe8n7/dZ2s9QsPKIl3SmA+IkRi6aRk5DUup:HBsFttaVKyj5Z7QY1hIks6gODUup

Score
10/10
mimikatz

Malware Config

Signatures

  • Mimikatz family
    mimikatz
  • mimikatz is an open source tool to dump credentials on Windows 9 IoCs
  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • arsenal-kit20240125.tgz
    .gz
  • sample
    .tar .ps1 polyglot
  • arsenal-kit/README.md
  • arsenal-kit/arsenal_kit.config
  • arsenal-kit/build_arsenal_kit.sh
    .sh linux
  • arsenal-kit/kits/artifact/README.md
  • arsenal-kit/kits/artifact/README_STACK_SPOOF.md
  • arsenal-kit/kits/artifact/build.sh
    .sh linux
  • arsenal-kit/kits/artifact/images/hunt_sleep_beacons.PNG
    .png
  • arsenal-kit/kits/artifact/images/stack_dump.PNG
    .png
  • arsenal-kit/kits/artifact/images/stack_dump_sp.PNG
    .png
  • arsenal-kit/kits/artifact/script_template.cna
  • arsenal-kit/kits/artifact/src-common/bypass-mailslot.c
  • arsenal-kit/kits/artifact/src-common/bypass-peek.c
  • arsenal-kit/kits/artifact/src-common/bypass-pipe.c
  • arsenal-kit/kits/artifact/src-common/bypass-readfile-v2.c
  • arsenal-kit/kits/artifact/src-common/bypass-readfile.c
  • arsenal-kit/kits/artifact/src-common/bypass-template.c
  • arsenal-kit/kits/artifact/src-common/injector.c
  • arsenal-kit/kits/artifact/src-common/patch.c
  • arsenal-kit/kits/artifact/src-common/patch.h
  • arsenal-kit/kits/artifact/src-common/spoof.c
  • arsenal-kit/kits/artifact/src-common/start_thread.c
  • arsenal-kit/kits/artifact/src-common/syscalls.h
  • arsenal-kit/kits/artifact/src-common/syscalls_embedded.c
  • arsenal-kit/kits/artifact/src-common/syscalls_indirect.c
  • arsenal-kit/kits/artifact/src-common/syscalls_indirect_randomized.c
  • arsenal-kit/kits/artifact/src-common/utils.c
  • arsenal-kit/kits/artifact/src-common/utils.h
  • arsenal-kit/kits/artifact/src-main/dllmain.c
  • arsenal-kit/kits/artifact/src-main/dllmain.def
  • arsenal-kit/kits/artifact/src-main/icon.ico
  • arsenal-kit/kits/artifact/src-main/main.c
  • arsenal-kit/kits/artifact/src-main/resource.rc
  • arsenal-kit/kits/artifact/src-main/svcmain.c
  • arsenal-kit/kits/mimikatz/README.md
  • arsenal-kit/kits/mimikatz/build.sh
    .sh linux
  • arsenal-kit/kits/mimikatz/mimikatz-chrome.x64.dll
    .dll windows:5 windows x64 arch:x64

    e5fec11951042c64bc4d887c1205fdd3


    Headers

    Imports

    Exports

    Sections

  • arsenal-kit/kits/mimikatz/mimikatz-chrome.x86.dll
    .dll windows:5 windows x86 arch:x86

    73389d31640c02c64806489702ed367b


    Headers

    Imports

    Exports

    Sections

  • arsenal-kit/kits/mimikatz/mimikatz-full.x64.dll
    .dll windows:5 windows x64 arch:x64

    916e8daec76c503eb32402b6b1f538b8


    Headers

    Imports

    Exports

    Sections

  • arsenal-kit/kits/mimikatz/mimikatz-full.x86.dll
    .dll windows:5 windows x86 arch:x86

    66866e1b931cd32e7b8ef2ba4c1a22a2


    Headers

    Imports

    Exports

    Sections

  • arsenal-kit/kits/mimikatz/mimikatz-max.x64.dll
    .dll windows:5 windows x64 arch:x64

    2b161135819d7ec74bd3e8a919bd7ef7


    Headers

    Imports

    Exports

    Sections

  • arsenal-kit/kits/mimikatz/mimikatz-max.x86.dll
    .dll windows:5 windows x86 arch:x86

    a10a2597c3d23a86b4faafb9eb8367be


    Headers

    Imports

    Exports

    Sections

  • arsenal-kit/kits/mimikatz/mimikatz-min.x64.dll
    .dll windows:5 windows x64 arch:x64

    1c8213c45c6deab7a5d937af037b1477


    Headers

    Imports

    Exports

    Sections

  • arsenal-kit/kits/mimikatz/mimikatz-min.x86.dll
    .dll windows:5 windows x86 arch:x86

    6e585ffca686993bf4a6cb1e5d945d05


    Headers

    Imports

    Exports

    Sections

  • arsenal-kit/kits/mimikatz/script_template.cna
  • arsenal-kit/kits/mutator/Dockerfile
  • arsenal-kit/kits/mutator/README.md
  • arsenal-kit/kits/mutator/docker_mutator.sh
    .sh .vbs linux polyglot
  • arsenal-kit/kits/mutator/memory_funcs.c
  • arsenal-kit/kits/mutator/mutator.sh
    .sh linux
  • arsenal-kit/kits/mutator/requirements.sh
    .sh linux
  • arsenal-kit/kits/mutator/sleepmask_mutator.cna
    .ps1
  • arsenal-kit/kits/process_inject/README.md
  • arsenal-kit/kits/process_inject/build.sh
    .sh linux
  • arsenal-kit/kits/process_inject/script_template.cna
  • arsenal-kit/kits/process_inject/src/beacon.h
  • arsenal-kit/kits/process_inject/src/process_inject_explicit.c
  • arsenal-kit/kits/process_inject/src/process_inject_spawn.c
  • arsenal-kit/kits/resource/README.md
  • arsenal-kit/kits/resource/build.sh
    .sh linux
  • arsenal-kit/kits/resource/compress.ps1
    .ps1
  • arsenal-kit/kits/resource/script_template.cna
  • arsenal-kit/kits/resource/template.exe.hta
    .html .vbs polyglot
  • arsenal-kit/kits/resource/template.hint.x64.ps1
    .ps1
  • arsenal-kit/kits/resource/template.hint.x86.ps1
    .ps1
  • arsenal-kit/kits/resource/template.psh.hta
    .html .vbs polyglot
  • arsenal-kit/kits/resource/template.py
  • arsenal-kit/kits/resource/template.vbs
    .vbs
  • arsenal-kit/kits/resource/template.x64.ps1
    .ps1
  • arsenal-kit/kits/resource/template.x86.ps1
    .ps1
  • arsenal-kit/kits/resource/template.x86.vba
    .vbs
  • arsenal-kit/kits/sleepmask/README.md
  • arsenal-kit/kits/sleepmask/build.sh
    .sh linux
  • arsenal-kit/kits/sleepmask/script_template.cna
  • arsenal-kit/kits/sleepmask/src47/beacon.h
  • arsenal-kit/kits/sleepmask/src47/bofdefs.h
  • arsenal-kit/kits/sleepmask/src47/cfg.c
  • arsenal-kit/kits/sleepmask/src47/common_mask.c
  • arsenal-kit/kits/sleepmask/src47/evasive_sleep.c
  • arsenal-kit/kits/sleepmask/src47/evasive_sleep_stack_spoof.c
  • arsenal-kit/kits/sleepmask/src47/log_sleepmask_parms.c
  • arsenal-kit/kits/sleepmask/src47/mask_text_section.c
  • arsenal-kit/kits/sleepmask/src47/sleepmask.c
  • arsenal-kit/kits/sleepmask/src47/sleepmask.h
  • arsenal-kit/kits/sleepmask/src47/sleepmask_pivot.c
  • arsenal-kit/kits/sleepmask/src47/syscalls.h
  • arsenal-kit/kits/sleepmask/src47/syscalls_embedded.c
  • arsenal-kit/kits/sleepmask/src47/syscalls_indirect.c
  • arsenal-kit/kits/sleepmask/src47/syscalls_indirect_randomized.c
  • arsenal-kit/kits/sleepmask/src49/beacon.h
  • arsenal-kit/kits/sleepmask/src49/bofdefs.h
  • arsenal-kit/kits/sleepmask/src49/cfg.c
  • arsenal-kit/kits/sleepmask/src49/common_mask.c
  • arsenal-kit/kits/sleepmask/src49/evasive_sleep.c
  • arsenal-kit/kits/sleepmask/src49/evasive_sleep_stack_spoof.c
  • arsenal-kit/kits/sleepmask/src49/log_sleepmask_parms.c
  • arsenal-kit/kits/sleepmask/src49/mask_text_section.c
  • arsenal-kit/kits/sleepmask/src49/sleepmask.c
  • arsenal-kit/kits/sleepmask/src49/sleepmask.h
  • arsenal-kit/kits/sleepmask/src49/sleepmask_pivot.c
  • arsenal-kit/kits/sleepmask/src49/syscalls.h
  • arsenal-kit/kits/sleepmask/src49/syscalls_embedded.c
  • arsenal-kit/kits/sleepmask/src49/syscalls_indirect.c
  • arsenal-kit/kits/sleepmask/src49/syscalls_indirect_randomized.c
  • arsenal-kit/kits/udrl-vs/README.md
  • arsenal-kit/kits/udrl-vs/bin/bud-loader/prepend-udrl.cna
  • arsenal-kit/kits/udrl-vs/bin/default-loader/prepend-udrl.cna
  • arsenal-kit/kits/udrl-vs/bin/default-loader/stomp-udrl.cna
  • arsenal-kit/kits/udrl-vs/bin/obfuscation-loader/debug-udrl.cna
  • arsenal-kit/kits/udrl-vs/bin/obfuscation-loader/lznt1.cna
  • arsenal-kit/kits/udrl-vs/bin/obfuscation-loader/obfuscate.cna
  • arsenal-kit/kits/udrl-vs/bin/obfuscation-loader/prepend-udrl.cna
  • arsenal-kit/kits/udrl-vs/bin/postex-loader/prepend-postex-udrl.cna
  • arsenal-kit/kits/udrl-vs/default.props
    .xml
  • arsenal-kit/kits/udrl-vs/example.profile
  • arsenal-kit/kits/udrl-vs/examples/bud-loader/README.md
  • arsenal-kit/kits/udrl-vs/examples/bud-loader/ReflectiveLoader.cpp
  • arsenal-kit/kits/udrl-vs/examples/bud-loader/ReflectiveLoader.h
  • arsenal-kit/kits/udrl-vs/examples/bud-loader/SyscallResolving.cpp
  • arsenal-kit/kits/udrl-vs/examples/bud-loader/SyscallResolving.h
  • arsenal-kit/kits/udrl-vs/examples/bud-loader/beacon_user_data.h
  • arsenal-kit/kits/udrl-vs/examples/bud-loader/bud-loader.vcxproj
    .xml
  • arsenal-kit/kits/udrl-vs/examples/bud-loader/bud-loader.vcxproj.filters
  • arsenal-kit/kits/udrl-vs/examples/default-loader/README.md
  • arsenal-kit/kits/udrl-vs/examples/default-loader/ReflectiveLoader.cpp
  • arsenal-kit/kits/udrl-vs/examples/default-loader/ReflectiveLoader.h
  • arsenal-kit/kits/udrl-vs/examples/default-loader/default-loader.vcxproj
    .xml
  • arsenal-kit/kits/udrl-vs/examples/default-loader/default-loader.vcxproj.filters
  • arsenal-kit/kits/udrl-vs/examples/obfuscation-loader/README.md
  • arsenal-kit/kits/udrl-vs/examples/obfuscation-loader/ReflectiveLoader.cpp
  • arsenal-kit/kits/udrl-vs/examples/obfuscation-loader/ReflectiveLoader.h
  • arsenal-kit/kits/udrl-vs/examples/obfuscation-loader/obfuscation-loader.vcxproj
    .xml
  • arsenal-kit/kits/udrl-vs/examples/obfuscation-loader/obfuscation-loader.vcxproj.filters
  • arsenal-kit/kits/udrl-vs/examples/postex-loader/README.md
  • arsenal-kit/kits/udrl-vs/examples/postex-loader/ReflectiveLoader.cpp
  • arsenal-kit/kits/udrl-vs/examples/postex-loader/ReflectiveLoader.h
  • arsenal-kit/kits/udrl-vs/examples/postex-loader/postex-loader.vcxproj
    .xml
  • arsenal-kit/kits/udrl-vs/examples/postex-loader/postex-loader.vcxproj.filters
  • arsenal-kit/kits/udrl-vs/library/DebugDLL.x64.h
  • arsenal-kit/kits/udrl-vs/library/DebugDLL.x86.h
  • arsenal-kit/kits/udrl-vs/library/End.cpp
  • arsenal-kit/kits/udrl-vs/library/End.h
  • arsenal-kit/kits/udrl-vs/library/FunctionResolving.cpp
  • arsenal-kit/kits/udrl-vs/library/FunctionResolving.h
  • arsenal-kit/kits/udrl-vs/library/Hash.h
  • arsenal-kit/kits/udrl-vs/library/LoaderTypes.h
  • arsenal-kit/kits/udrl-vs/library/Obfuscation.cpp
  • arsenal-kit/kits/udrl-vs/library/Obfuscation.h
  • arsenal-kit/kits/udrl-vs/library/StdLib.cpp
  • arsenal-kit/kits/udrl-vs/library/StdLib.h
  • arsenal-kit/kits/udrl-vs/library/Utils.cpp
  • arsenal-kit/kits/udrl-vs/library/Utils.h
  • arsenal-kit/kits/udrl-vs/library/library.vcxproj
    .xml
  • arsenal-kit/kits/udrl-vs/library/library.vcxproj.filters
  • arsenal-kit/kits/udrl-vs/loader.props
    .xml
  • arsenal-kit/kits/udrl-vs/requirements.txt
  • arsenal-kit/kits/udrl-vs/udrl-vs.sln
  • arsenal-kit/kits/udrl-vs/udrl.py
  • arsenal-kit/kits/udrl/README.md
  • arsenal-kit/kits/udrl/build.sh
    .sh linux
  • arsenal-kit/kits/udrl/script_template.cna
  • arsenal-kit/kits/udrl/src/ReflectiveDLLInjection.h
  • arsenal-kit/kits/udrl/src/ReflectiveLoader.c
  • arsenal-kit/kits/udrl/src/ReflectiveLoader.h
  • arsenal-kit/releasenotes.txt
  • arsenal-kit/templates/arsenal_kit.cna.template
  • arsenal-kit/templates/helper_functions.template
  • arsenal-kit/utils/getFunctionOffset/getFunctionOffset.c