Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2025-03-26...om.exe

windows7-x64

7

2025-03-26...om.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-03-26_94c2ef04d8946bcd15ef2e7cbbe64551_black-basta_cobalt-strike_satacom

  • Size

    11.1MB

  • Sample

    250326-yqqh7s11bx

  • MD5

    94c2ef04d8946bcd15ef2e7cbbe64551

  • SHA1

    c617dd782537e94b31a4af176b23a919d7429d18

  • SHA256

    6f344b47460663c01469e6b8c5ac322a8f89c9ae3792021d5385a1ac5d6dc6cf

  • SHA512

    7f6cab8b9a9b7820a6b9a0508dd7ecb7c1edb41f546cd29adda462ba026320d0ff4bd845ec0c50992fe01f1b950529875255b6f5da075e382536462ab14aa872

  • SSDEEP

    196608:9Wg06kF02I+ItwfI9jUCD6rlaZLH7qRGrGIYEw1coZy8FUsOnAod:it3NIH20drLYEuZjod

Score
10/10
blankgrabberdiscoveryexecutionupx

Malware Config

Targets

    • Target

      2025-03-26_94c2ef04d8946bcd15ef2e7cbbe64551_black-basta_cobalt-strike_satacom

    • Size

      11.1MB

    • MD5

      94c2ef04d8946bcd15ef2e7cbbe64551

    • SHA1

      c617dd782537e94b31a4af176b23a919d7429d18

    • SHA256

      6f344b47460663c01469e6b8c5ac322a8f89c9ae3792021d5385a1ac5d6dc6cf

    • SHA512

      7f6cab8b9a9b7820a6b9a0508dd7ecb7c1edb41f546cd29adda462ba026320d0ff4bd845ec0c50992fe01f1b950529875255b6f5da075e382536462ab14aa872

    • SSDEEP

      196608:9Wg06kF02I+ItwfI9jUCD6rlaZLH7qRGrGIYEw1coZy8FUsOnAod:it3NIH20drLYEuZjod

    Score
    8/10
    upxdiscoveryexecution

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

      execution

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Enumerates processes with tasklist

      discovery

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks