Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

99dae8ec4e...62.exe

windows7-x64

10

99dae8ec4e...62.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    99dae8ec4ea0412987f7b96781f0339869a6b8c8794a43649d5a781de4ae4762.exe

  • Size

    390KB

  • Sample

    250216-xm7smsvrdl

  • MD5

    69027622c97349d59bf7408a879b84b7

  • SHA1

    a5744a4796f43e1a11fae6d3bf0b4959607fc83d

  • SHA256

    99dae8ec4ea0412987f7b96781f0339869a6b8c8794a43649d5a781de4ae4762

  • SHA512

    d5d0a0678bd2971adec3522ea10318b7eb7f170fa67da86426ab84377e276214c7dd32526a3774379876244bbc3d9daca7450cf3092dacfd011d88e97c3c69e8

  • SSDEEP

    6144:AyUdeqrKXc8f79tUyektmYghwk3Ta77HO60fWAUmBLvy1igKt5Vw:hwr4c8fAktrEwk3Ta77Hp0fWAUmB2CVw

Score
10/10
cobaltstrikebackdoordiscoverytrojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.206.141:8000/r8cP

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; Touch; MALCJS)

Targets

    • Target

      99dae8ec4ea0412987f7b96781f0339869a6b8c8794a43649d5a781de4ae4762.exe

    • Size

      390KB

    • MD5

      69027622c97349d59bf7408a879b84b7

    • SHA1

      a5744a4796f43e1a11fae6d3bf0b4959607fc83d

    • SHA256

      99dae8ec4ea0412987f7b96781f0339869a6b8c8794a43649d5a781de4ae4762

    • SHA512

      d5d0a0678bd2971adec3522ea10318b7eb7f170fa67da86426ab84377e276214c7dd32526a3774379876244bbc3d9daca7450cf3092dacfd011d88e97c3c69e8

    • SSDEEP

      6144:AyUdeqrKXc8f79tUyektmYghwk3Ta77HO60fWAUmBLvy1igKt5Vw:hwr4c8fAktrEwk3Ta77Hp0fWAUmB2CVw

    Score
    10/10
    cobaltstrikebackdoortrojandiscovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks