Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2025-03-21_8d6122cb7d7d5b64776cb286e519d738_amadey_cobalt-strike_poet-rat

  • Size

    5.9MB

  • Sample

    250321-jwa85syqx2

  • MD5

    8d6122cb7d7d5b64776cb286e519d738

  • SHA1

    0c6ab551f033dc271756223644f6af2c1d10b43c

  • SHA256

    404e1fad67f470fe245e1317b9f679ddf498b9b143d2710059d7a76ee917d28e

  • SHA512

    3b9dcf4a5e29082965d2ca657c0fd4aefc614d995faddba1f1fc0a3ae6efba2fdd9dddfde598ade6787b69d5e823fe4cc3893aa9d73f1d1351ff2db208fbccab

  • SSDEEP

    98304:oemTLkNdfE0pZrD56utgpPFotBER/mQ32lUD:T+q56utgpPF8u/7D

Malware Config

Targets

    • Target

      2025-03-21_8d6122cb7d7d5b64776cb286e519d738_amadey_cobalt-strike_poet-rat

    • Size

      5.9MB

    • MD5

      8d6122cb7d7d5b64776cb286e519d738

    • SHA1

      0c6ab551f033dc271756223644f6af2c1d10b43c

    • SHA256

      404e1fad67f470fe245e1317b9f679ddf498b9b143d2710059d7a76ee917d28e

    • SHA512

      3b9dcf4a5e29082965d2ca657c0fd4aefc614d995faddba1f1fc0a3ae6efba2fdd9dddfde598ade6787b69d5e823fe4cc3893aa9d73f1d1351ff2db208fbccab

    • SSDEEP

      98304:oemTLkNdfE0pZrD56utgpPFotBER/mQ32lUD:T+q56utgpPF8u/7D

    • Cobaltstrike

      Detected malicious payload which is part of Cobaltstrike.

    • Cobaltstrike family

    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks