Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

8613616f74...02.exe

windows7-x64

10

8613616f74...02.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8613616f74d6f80819e24bf11dc27af825e20dd214636277f2e4aba8d989bd02

  • Size

    44KB

  • Sample

    221030-rtj29sfcbq

  • MD5

    a2ddf46077eda9278ad6fed530ae810c

  • SHA1

    1e0082877baded12bcfb4de91427a9cbbfcfce28

  • SHA256

    8613616f74d6f80819e24bf11dc27af825e20dd214636277f2e4aba8d989bd02

  • SHA512

    e859c7c94a708fca11c0e12b34f055540fbb200a5c5ea3f7aa55bc3f83669a8c7049cfb0c734af4b408188b64327930d67f7711b9096d7c1ce531e8add2999f0

  • SSDEEP

    768:rBr+tjFqTPkAlOztB1lr6an3smTA8uvm2DfOTwYPI2zo+J:FyRUHlEL1lr6an3TLuvm2buQqo+J

Score
10/10
xtremeratpersistenceratspyware

Malware Config

Targets

    • Target

      8613616f74d6f80819e24bf11dc27af825e20dd214636277f2e4aba8d989bd02

    • Size

      44KB

    • MD5

      a2ddf46077eda9278ad6fed530ae810c

    • SHA1

      1e0082877baded12bcfb4de91427a9cbbfcfce28

    • SHA256

      8613616f74d6f80819e24bf11dc27af825e20dd214636277f2e4aba8d989bd02

    • SHA512

      e859c7c94a708fca11c0e12b34f055540fbb200a5c5ea3f7aa55bc3f83669a8c7049cfb0c734af4b408188b64327930d67f7711b9096d7c1ce531e8add2999f0

    • SSDEEP

      768:rBr+tjFqTPkAlOztB1lr6an3smTA8uvm2DfOTwYPI2zo+J:FyRUHlEL1lr6an3TLuvm2buQqo+J

    Score
    10/10
    xtremeratpersistenceratspyware

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks