Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

3

2025-03-21...ch.exe

windows7-x64

6

2025-03-21...ch.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-03-21_a41bac0a92629d690e57c6c6bc9d242b_cobalt-strike_ezcob_poet-rat_sliver_snatch

  • Size

    10.8MB

  • Sample

    250321-jw93gavwfz

  • MD5

    a41bac0a92629d690e57c6c6bc9d242b

  • SHA1

    b3da913ab3acbcdd569a35a3a5629124e26cd331

  • SHA256

    4d6538879d361640785635c60c842f1fd02adfb98c6001e9a24df3099e0d089a

  • SHA512

    ac70c8e0b0a02139e251651a72ae12f41bcc2d911d88d6f3c8f080529dd59a39e7431c5fb00b3a247d322df354786ae2f2596ec16b5e272317bdeae465654473

  • SSDEEP

    196608:I+D5q1SGs2yRwtkpqShRBhRhhRQhRWhRfhRFhR+hRV:DAkLRLRrRMRCRpRHRaRV

Score
6/10
persistence

Malware Config

Targets

    • Target

      2025-03-21_a41bac0a92629d690e57c6c6bc9d242b_cobalt-strike_ezcob_poet-rat_sliver_snatch

    • Size

      10.8MB

    • MD5

      a41bac0a92629d690e57c6c6bc9d242b

    • SHA1

      b3da913ab3acbcdd569a35a3a5629124e26cd331

    • SHA256

      4d6538879d361640785635c60c842f1fd02adfb98c6001e9a24df3099e0d089a

    • SHA512

      ac70c8e0b0a02139e251651a72ae12f41bcc2d911d88d6f3c8f080529dd59a39e7431c5fb00b3a247d322df354786ae2f2596ec16b5e272317bdeae465654473

    • SSDEEP

      196608:I+D5q1SGs2yRwtkpqShRBhRhhRQhRWhRfhRFhR+hRV:DAkLRLRrRMRCRpRHRaRV

    Score
    6/10
    persistence

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks