Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

fe14779dc9...c2.exe

windows7-x64

10

fe14779dc9...c2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fe14779dc9281fadf03d286003c46c1e2b98e5cdeb79f4ad38f0e74f31f9f0c2

  • Size

    108KB

  • Sample

    250321-kmfmyavzbt

  • MD5

    9f3ed9525df8efdcb81f5c89bcc753b1

  • SHA1

    b3604e26e00fe072b44ad66baff36eb1c5d2bdcb

  • SHA256

    fe14779dc9281fadf03d286003c46c1e2b98e5cdeb79f4ad38f0e74f31f9f0c2

  • SHA512

    4a71965648708642afdc0dc8f8e66e3b5bd4bea9b5c862e7206e34bdccde4d2761e069ac22f6846f60d97e23e4839c9ecafc0255b356814072ad42dfff40ebb9

  • SSDEEP

    1536:+8BuezwI3vEyKs6vb+clSzkv0kWqZZrqDxcK8sWwd49dlCp2+h0:PB/c3b+CKkv0pqZZrAx7boYp2+h0

Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://10.0.1.4:8090/UQvA

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MALC)

Targets

    • Target

      fe14779dc9281fadf03d286003c46c1e2b98e5cdeb79f4ad38f0e74f31f9f0c2

    • Size

      108KB

    • MD5

      9f3ed9525df8efdcb81f5c89bcc753b1

    • SHA1

      b3604e26e00fe072b44ad66baff36eb1c5d2bdcb

    • SHA256

      fe14779dc9281fadf03d286003c46c1e2b98e5cdeb79f4ad38f0e74f31f9f0c2

    • SHA512

      4a71965648708642afdc0dc8f8e66e3b5bd4bea9b5c862e7206e34bdccde4d2761e069ac22f6846f60d97e23e4839c9ecafc0255b356814072ad42dfff40ebb9

    • SSDEEP

      1536:+8BuezwI3vEyKs6vb+clSzkv0kWqZZrqDxcK8sWwd49dlCp2+h0:PB/c3b+CKkv0pqZZrAx7boYp2+h0

    Score
    10/10
    cobaltstrikebackdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks