Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
40s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
30/12/2023, 10:41
General
-
Target
163a61f30478a21a6e91765d09fdbb51.exe
-
Size
807KB
-
MD5
163a61f30478a21a6e91765d09fdbb51
-
SHA1
7baf2e6911e114946ebb7e6475cb7b74ab6af343
-
SHA256
be230035f1e1b86c687d94ba142e56f1859cbee72cce927a62047e04b30b7807
-
SHA512
17e63aeeb25be473e1b6c80d84e9a94d1f249900c3406fabe71971c24d500d7855d8fc36f855ec52c4b96b37d40f3bf11c312308a54c84c7afab0c5369bf3e45
-
SSDEEP
12288:ixx3htjxnAqZ6oR65AXwgFvuSSSII920CdUjRQg75zsDxrK4EFA1lN3mgR3mEuK:ixx32oR6qge920CdUjvSpK/KXNV3mI
Malware Config
Extracted
xloader
2.3
u3r5
alashan.ltd
demopagephequan.online
garxznql.icu
unetart.com
dajiangzhibo15.com
influencer.fund
beverlyhills.city
strefafryzur.net
giftboxhawaii.com
ecotiare.com
homeandgardenradioshow.com
sageandsandco.com
laflesoley.com
icipatanegra.online
autovistoriapredial.net
xn--polenezkypark-pmb.com
cbdamic.com
aaronandmarissa.com
datasoma.digital
theclosetology.com
Signatures
-
Xloader
Xloader is a rebranded version of Formbook malware.
-
Xloader payload 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\163a61f30478a21a6e91765d09fdbb51.exe"C:\Users\Admin\AppData\Local\Temp\163a61f30478a21a6e91765d09fdbb51.exe"1⤵
-
C:\Users\Admin\AppData\Local\Temp\163a61f30478a21a6e91765d09fdbb51.exe"C:\Users\Admin\AppData\Local\Temp\163a61f30478a21a6e91765d09fdbb51.exe"2⤵
-
-
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\Admin\AppData\Local\Temp\163a61f30478a21a6e91765d09fdbb51.exe"2⤵
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
164KB
-
Filesize
68KB
-
Filesize
120KB
-
Filesize
7.7MB
-
Filesize
64KB
-
Filesize
104KB
-
Filesize
32KB
-
Filesize
80KB
-
Filesize
56KB
-
Filesize
200KB
-
Filesize
7.7MB
-
Filesize
64KB
-
Filesize
408KB
-
Filesize
3.3MB
-
Filesize
408KB
-
Filesize
120KB
-
Filesize
304KB
-
Filesize
136KB
-
Filesize
6.2MB
-
Filesize
64KB
-
Filesize
304KB
-
Filesize
600KB
-
Filesize
6.5MB
-
Filesize
216KB
-
Filesize
64KB
-
Filesize
652KB
-
Filesize
64KB
-
Filesize
104KB
-
Filesize
40KB
-
Filesize
832KB
-
Filesize
5.6MB
-
Filesize
7.7MB
-
Filesize
64KB
-
Filesize
40KB
-
Filesize
64KB
-
Filesize
184KB
-
Filesize
7.7MB
-
Filesize
7.7MB
-
Filesize
104KB
-
Filesize
624KB
-
Filesize
632KB
-
Filesize
584KB