Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2025-03-21_8d6122cb7d7d5b64776cb286e519d738_amadey_cobalt-strike_poet-rat

  • Size

    5.9MB

  • MD5

    8d6122cb7d7d5b64776cb286e519d738

  • SHA1

    0c6ab551f033dc271756223644f6af2c1d10b43c

  • SHA256

    404e1fad67f470fe245e1317b9f679ddf498b9b143d2710059d7a76ee917d28e

  • SHA512

    3b9dcf4a5e29082965d2ca657c0fd4aefc614d995faddba1f1fc0a3ae6efba2fdd9dddfde598ade6787b69d5e823fe4cc3893aa9d73f1d1351ff2db208fbccab

  • SSDEEP

    98304:oemTLkNdfE0pZrD56utgpPFotBER/mQ32lUD:T+q56utgpPF8u/7D

Malware Config

Signatures

  • Cobaltstrike family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2025-03-21_8d6122cb7d7d5b64776cb286e519d738_amadey_cobalt-strike_poet-rat
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections