Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

6ef1e04016...e5.exe

windows7-x64

10

6ef1e04016...e5.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6ef1e04016619a23768fbb6ace3c5be5

  • Size

    40KB

  • Sample

    230421-g1bz5agd6s

  • MD5

    6ef1e04016619a23768fbb6ace3c5be5

  • SHA1

    ff55539983748794a28d562cbaafed63518d6f49

  • SHA256

    36744630552440395ca6062a6a6b6634791193afc423bd77c9eea84f210cfb83

  • SHA512

    c377825399f4050a3f52e4aa61de84cbc62bfe41d4f8a5261425f8cf523561a3ac68f215ae0db6daed3d6272c7665275125fbbd460d0ac499caf94e69260bf84

  • SSDEEP

    768:L8UqXqUDmxqoF2vfSVoRT0Rp0wR5xsQhLOkwoE/69:ItqFqZipRRj1OKE/69

Score
10/10
xwormrattrojan

Malware Config

Extracted

Family

xworm

C2

149.102.231.91:5000

Mutex

EFRo3ghjj1iCQ730

Attributes
  • install_file

    USB.exe

aes.plain

Targets

    • Target

      6ef1e04016619a23768fbb6ace3c5be5

    • Size

      40KB

    • MD5

      6ef1e04016619a23768fbb6ace3c5be5

    • SHA1

      ff55539983748794a28d562cbaafed63518d6f49

    • SHA256

      36744630552440395ca6062a6a6b6634791193afc423bd77c9eea84f210cfb83

    • SHA512

      c377825399f4050a3f52e4aa61de84cbc62bfe41d4f8a5261425f8cf523561a3ac68f215ae0db6daed3d6272c7665275125fbbd460d0ac499caf94e69260bf84

    • SSDEEP

      768:L8UqXqUDmxqoF2vfSVoRT0Rp0wR5xsQhLOkwoE/69:ItqFqZipRRj1OKE/69

    Score
    10/10
    xwormrattrojan

    • Xworm

      Xworm is a remote access trojan written in C#.

      trojanratxworm

    • Drops startup file

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks