Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2025-03-21_b2449030553d4418225c3e6fd90853d2_amadey_cobalt-strike_poet-rat

  • Size

    5.9MB

  • MD5

    b2449030553d4418225c3e6fd90853d2

  • SHA1

    90c085d8400d6249225f8a4673e08fe90eed3d7b

  • SHA256

    560996fc6ae6b5eb7131dafe4f090a70690a557d877351e5847689eff87797d4

  • SHA512

    a3331eec2c1b45ead4cde407d532b9d575de6589cd38d6c22b4d107a26ea33668578cc3eef4eda27cecdd21c048957de86fc3638c3181468aaccaec65754d8d1

  • SSDEEP

    98304:oemTLkNdfE0pZrD56utgpPFotBER/mQ32lUY:T+q56utgpPF8u/7Y

Malware Config

Signatures

  • Cobaltstrike family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2025-03-21_b2449030553d4418225c3e6fd90853d2_amadey_cobalt-strike_poet-rat
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections