Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2025-03-21_d5fd92c71e5498d4d7f9c53cac8dbbe9_cobalt-strike_poet-rat_sliver_snatch

  • Size

    10.6MB

  • Sample

    250321-jz9wwayq13

  • MD5

    d5fd92c71e5498d4d7f9c53cac8dbbe9

  • SHA1

    ea28951af3249fc4781fd60282bbae1c4bc25d26

  • SHA256

    c8047bcdb4f99ab22326d4fe0be83b5d0c9efa6cfd8ae86514518996591bdd71

  • SHA512

    38dcd7a9b7e5cbe2e27dc1a6b6fb3ec656a1b4227329a5560e25aa8f8d6ef6c0d21fd59e2743a9343be78af8adbc3d68f20ee0f8479768e3cc8b20083be6214c

  • SSDEEP

    196608:I+D5q1SGs2yRwtkpqShRBhR3hRbhRhhR/hR5hR8:DAkLRLRxRtRrRJRzR8

Score
6/10

Malware Config

Targets

    • Target

      2025-03-21_d5fd92c71e5498d4d7f9c53cac8dbbe9_cobalt-strike_poet-rat_sliver_snatch

    • Size

      10.6MB

    • MD5

      d5fd92c71e5498d4d7f9c53cac8dbbe9

    • SHA1

      ea28951af3249fc4781fd60282bbae1c4bc25d26

    • SHA256

      c8047bcdb4f99ab22326d4fe0be83b5d0c9efa6cfd8ae86514518996591bdd71

    • SHA512

      38dcd7a9b7e5cbe2e27dc1a6b6fb3ec656a1b4227329a5560e25aa8f8d6ef6c0d21fd59e2743a9343be78af8adbc3d68f20ee0f8479768e3cc8b20083be6214c

    • SSDEEP

      196608:I+D5q1SGs2yRwtkpqShRBhR3hRbhRhhR/hR5hR8:DAkLRLRxRtRrRJRzR8

    Score
    6/10
    • Adds Run key to start application

    • Drops desktop.ini file(s)

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks