Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
15a523f89ecd14315c1bd33fd62b142428eadd10dad64abb5899f57e0c828079
-
Size
108KB
-
Sample
221204-byh3rsef69
-
MD5
3636658fa95ccc201b5c24ef1be82ec3
-
SHA1
4dfdbea69339e71c983d20581794e497ab8b4f5f
-
SHA256
15a523f89ecd14315c1bd33fd62b142428eadd10dad64abb5899f57e0c828079
-
SHA512
b2a7958dc621b20363a5fabe33ab21b53edd752766674c3933fac855d0bb97150c073534d585946ae9209ff0dca68cd7d283db17e112c18f487482c741a5e278
-
SSDEEP
3072:aNW7dEvotvXpYnPuKZEtCiCsBV45yCyx9eq1y/GJlW:aNW7mvIqnPD4p3eX/GJs
Behavioral task
behavioral1
Sample
15a523f89ecd14315c1bd33fd62b142428eadd10dad64abb5899f57e0c828079.exe
Resource
win7-20220901-en
Malware Config
Extracted
xtremerat
mastino.no-ip.org
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
Targets
-
-
Target
15a523f89ecd14315c1bd33fd62b142428eadd10dad64abb5899f57e0c828079
-
Size
108KB
-
MD5
3636658fa95ccc201b5c24ef1be82ec3
-
SHA1
4dfdbea69339e71c983d20581794e497ab8b4f5f
-
SHA256
15a523f89ecd14315c1bd33fd62b142428eadd10dad64abb5899f57e0c828079
-
SHA512
b2a7958dc621b20363a5fabe33ab21b53edd752766674c3933fac855d0bb97150c073534d585946ae9209ff0dca68cd7d283db17e112c18f487482c741a5e278
-
SSDEEP
3072:aNW7dEvotvXpYnPuKZEtCiCsBV45yCyx9eq1y/GJlW:aNW7mvIqnPD4p3eX/GJs
-
Detect XtremeRAT payload
-
Modifies firewall policy service
-
XtremeRAT
The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.
-