Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
41b804087a2da74fa613efd66fa8edcb.exe
-
Size
40KB
-
Sample
240101-l3f43sgdgn
-
MD5
41b804087a2da74fa613efd66fa8edcb
-
SHA1
0701226e6636d7317afb8889594d1e877627e592
-
SHA256
eca97d7269a904a9671c828c7264407fa91d54aef414e07287aa148171104f9c
-
SHA512
8dceef9644807103809362955e84d7ff95b1d1d08c0f14f066477c872c0b900570db57b2eab8bf2207c5d1459d0a1b248f29f649f5a80010e608475bf1091f61
-
SSDEEP
768:NE9hYh7Nq2Ozhiow2Gkm6Bc3/9fzNBwIldgbzosd:Nu2hzOlw2GkmX3BBldg/ok
Behavioral task
behavioral1
Sample
41b804087a2da74fa613efd66fa8edcb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
41b804087a2da74fa613efd66fa8edcb.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
41b804087a2da74fa613efd66fa8edcb.exe
-
Size
40KB
-
MD5
41b804087a2da74fa613efd66fa8edcb
-
SHA1
0701226e6636d7317afb8889594d1e877627e592
-
SHA256
eca97d7269a904a9671c828c7264407fa91d54aef414e07287aa148171104f9c
-
SHA512
8dceef9644807103809362955e84d7ff95b1d1d08c0f14f066477c872c0b900570db57b2eab8bf2207c5d1459d0a1b248f29f649f5a80010e608475bf1091f61
-
SSDEEP
768:NE9hYh7Nq2Ozhiow2Gkm6Bc3/9fzNBwIldgbzosd:Nu2hzOlw2GkmX3BBldg/ok
Score10/10-
Detect XtremeRAT payload
-
XtremeRAT
The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.
-
Manipulates Digital Signatures
Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to obtain their binary as valid.
-
Adds Run key to start application
-