Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

3316c81227...6d.exe

windows7-x64

10

3316c81227...6d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3316c81227c6bbdf7ddee9530ba4c5d8163ba2bc1eb2634aab4f8c74e2742b6d

  • Size

    45KB

  • Sample

    221002-sax1fsbeb8

  • MD5

    7cb035620cef09757d349991ff8bc750

  • SHA1

    47b0d0f3016f6fde2f8582307afe9ef6f28c6952

  • SHA256

    3316c81227c6bbdf7ddee9530ba4c5d8163ba2bc1eb2634aab4f8c74e2742b6d

  • SHA512

    796ddb5dcec249e490256aa172f1e47b4003f3b9296a8e2a92f3edb8817e21478f2f593da6d12a48bee68ea65c8ed7fa016c4cf5a5e12010e5b051fdf4ba0675

  • SSDEEP

    768:9Br+tjFY90VY6W1jwmDzKgEFQXCklTAnH8hwfOgw0clzova:jyRh01jxPEFQXCkeH84bIova

Score
10/10
xtremeratpersistenceratspyware

Malware Config

Targets

    • Target

      3316c81227c6bbdf7ddee9530ba4c5d8163ba2bc1eb2634aab4f8c74e2742b6d

    • Size

      45KB

    • MD5

      7cb035620cef09757d349991ff8bc750

    • SHA1

      47b0d0f3016f6fde2f8582307afe9ef6f28c6952

    • SHA256

      3316c81227c6bbdf7ddee9530ba4c5d8163ba2bc1eb2634aab4f8c74e2742b6d

    • SHA512

      796ddb5dcec249e490256aa172f1e47b4003f3b9296a8e2a92f3edb8817e21478f2f593da6d12a48bee68ea65c8ed7fa016c4cf5a5e12010e5b051fdf4ba0675

    • SSDEEP

      768:9Br+tjFY90VY6W1jwmDzKgEFQXCklTAnH8hwfOgw0clzova:jyRh01jxPEFQXCkeH84bIova

    Score
    10/10
    xtremeratpersistenceratspyware

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Modifies Installed Components in the registry

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks