Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

x.exe

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    x.exe

  • Size

    63KB

  • Sample

    240224-ya661sce99

  • MD5

    78e0d6b85721aec5404971862734be82

  • SHA1

    b0f490a2d377670c62c294b9bb163cacf80c256c

  • SHA256

    6906f0586af2064fb11cd0e81fc09e6f87fa4e77580b43e79ead6242d6cc7469

  • SHA512

    e03ae3b43aee97ee21053c1174195b19388cc1fe403813afe63aa0da4c9418b47a0e2eb846082d5180264820572028085ded744bdd28e1e1cf9e090838020666

  • SSDEEP

    1536:+Ed0d4ayDZpxSAb+hXSBni3dWY6AxtNOu65x+/kuC:+Bd4aYbAAba9WOPOr5iC

Score
10/10
xwormrattrojan

Malware Config

Extracted

Family

xworm

C2

18.ip.gl.ply.gg:33725

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Targets

    • Target

      x.exe

    • Size

      63KB

    • MD5

      78e0d6b85721aec5404971862734be82

    • SHA1

      b0f490a2d377670c62c294b9bb163cacf80c256c

    • SHA256

      6906f0586af2064fb11cd0e81fc09e6f87fa4e77580b43e79ead6242d6cc7469

    • SHA512

      e03ae3b43aee97ee21053c1174195b19388cc1fe403813afe63aa0da4c9418b47a0e2eb846082d5180264820572028085ded744bdd28e1e1cf9e090838020666

    • SSDEEP

      1536:+Ed0d4ayDZpxSAb+hXSBni3dWY6AxtNOu65x+/kuC:+Bd4aYbAAba9WOPOr5iC

    Score
    10/10
    xwormrattrojan

    • Detect Xworm Payload

    • Xworm

      Xworm is a remote access trojan written in C#.

      trojanratxworm

    • Drops startup file

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks