Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2025-03-21_5a7350eb3cd5bb1ad78caf7d1b629c97_amadey_cobalt-strike_poet-rat

  • Size

    5.9MB

  • Sample

    250321-l3ftbazqs4

  • MD5

    5a7350eb3cd5bb1ad78caf7d1b629c97

  • SHA1

    c63dbef2fc2692132357acdf06e03a107e422892

  • SHA256

    8a59c81c7e71139828822e313dbe9c44efe8c6e8c36baf6a5e8444d164e08ecd

  • SHA512

    00e85d8f48875204c01c9cf5b032e60b6c0cb68f8cd3820578e8f913e1a646336ec4adcf416a52ed451d53ec8ee1782b3e24ac68650704420934ad80d18fffa4

  • SSDEEP

    98304:oemTLkNdfE0pZrD56utgpPFotBER/mQ32lUr:T+q56utgpPF8u/7r

Malware Config

Targets

    • Target

      2025-03-21_5a7350eb3cd5bb1ad78caf7d1b629c97_amadey_cobalt-strike_poet-rat

    • Size

      5.9MB

    • MD5

      5a7350eb3cd5bb1ad78caf7d1b629c97

    • SHA1

      c63dbef2fc2692132357acdf06e03a107e422892

    • SHA256

      8a59c81c7e71139828822e313dbe9c44efe8c6e8c36baf6a5e8444d164e08ecd

    • SHA512

      00e85d8f48875204c01c9cf5b032e60b6c0cb68f8cd3820578e8f913e1a646336ec4adcf416a52ed451d53ec8ee1782b3e24ac68650704420934ad80d18fffa4

    • SSDEEP

      98304:oemTLkNdfE0pZrD56utgpPFotBER/mQ32lUr:T+q56utgpPF8u/7r

    • Cobaltstrike

      Detected malicious payload which is part of Cobaltstrike.

    • Cobaltstrike family

    • Xmrig family

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks