Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

b92af5397f...4c.dll

windows7-x64

3

b92af5397f...4c.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b92af5397f63a06d0738d2c933ecb88fe63994d4c1caba872162d4d59118344c.zip

  • Size

    111KB

  • Sample

    250321-k3bc6av1h1

  • MD5

    3fa86527c92833ff34744f0872dc6b15

  • SHA1

    d080d1606e28c5140a1ef3de4185ef71e9f902e6

  • SHA256

    4124010aad2409ce3efc287d8a1bb6a058f667d8f17d08fde196dcbab5b4ab18

  • SHA512

    3e5d884fdb1a9035c441f2d3a67aaafad9e34e44ea434d76dd06cf57cd481a5779c2b5753741af62bbe0294a5862bf9e0434e5cc018bd3f9a9d2eefaa6b02ecc

  • SSDEEP

    3072:e6+bS0aoT+eTLwNE/LQX3wi8dHeU838PMAh7:gbS0tTmEzUcHePqMq

Score
10/10
cobaltstrike1234567890discovery

Malware Config

Extracted

Family

cobaltstrike

Botnet

1234567890

Attributes
  • beacon_type

    4096

  • http_header1

    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==

  • http_header2

    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==

  • polling_time

    10000

  • port_number

    4444

  • sc_process32

    %windir%\syswow64\rundll32.exe

  • sc_process64

    %windir%\sysnative\rundll32.exe

  • state_machine

    MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCDEYKMjO6xN+2HAk7G4h5dpBoS8CIXLwNA9riINLtyESnqWT0PCwAVh83fEjkyLQZbRkY37geEf7Rw345fKQXOLZkT5u78GU9kPw2xpQ6H0crxednegjaWeGjTSAI+nwjarnWHNY1Xqb+xQlWeTLNMyLKCXJ/z0sfwKr5hwPGV0QIDAQABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==

  • unknown1

    4096

  • unknown2

    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==

  • watermark

    1234567890

Targets

    • Target

      b92af5397f63a06d0738d2c933ecb88fe63994d4c1caba872162d4d59118344c

    • Size

      200KB

    • MD5

      2c5cfcc9cc3258ed29843132b98b1041

    • SHA1

      b485b19be23ed98e3cc85989856fad0a152f7bf0

    • SHA256

      b92af5397f63a06d0738d2c933ecb88fe63994d4c1caba872162d4d59118344c

    • SHA512

      a810f47cfc20d03bc1e9be1318f85741ef3855c23f5c41d41c96aaa0d82d82fc20f8184127e8d786645a8d7d371d83ea7810f6d80650d116752afb3a291dc7a9

    • SSDEEP

      3072:x7U9uXWusP38CWlTR65tk4+k8v7FsZWjEUKz+Z5v9:MeWue8CWNA5tQ7FzjCaj9

    Score
    3/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks