Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

531fb63826...1a.exe

windows7-x64

10

531fb63826...1a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    df6e8e8955acdb9b0864f25d442f43c5.bin

  • Size

    16KB

  • Sample

    240415-cbemhabe38

  • MD5

    ff87f5cb8a1ee0cacfa03c5423a7898d

  • SHA1

    6a94390078ffd99fcb2593faf973df4aee53b6a5

  • SHA256

    52881fc4885ad98e4f5ec62c4c03b624bc74fc9f148f4af945c4c73b870b3bca

  • SHA512

    9ebba1f5a88e3b2474d7e44a992af32f69af2cdff37f3ef282d8fcf06bdb24106c1f7b60e70e4473821de6686c14d657e20b6ed7920e25d1e33f77be40673f99

  • SSDEEP

    384:dDXR3YlYiHeBIAdOrX9o2Eq5BOy8RbdQPyA76RFOt/:dDR3Y+iHSXuN9EGZ8J0UFw

Score
10/10
xwormrattrojan

Malware Config

Extracted

Family

xworm

Version

5.0

C2

warzones12.duckdns.org:7000

Mutex

zE2l9o6TPb8JbyzU

Attributes
  • install_file

    USB.exe

aes.plain

Targets

    • Target

      531fb63826f4d36eb31debe554073a4f4a73eaca264699b21e24e912b831f81a.exe

    • Size

      33KB

    • MD5

      df6e8e8955acdb9b0864f25d442f43c5

    • SHA1

      d984a3b537114a8005a59e922c4cbaec6f3dcd2c

    • SHA256

      531fb63826f4d36eb31debe554073a4f4a73eaca264699b21e24e912b831f81a

    • SHA512

      9cef337e429b150295579c0387f06b3d4aa0cfccc92747c1a783023425d4bb0cc1f060a643294c7baf38b837cbe4eedf4de8a1b5d99af96ac2aaf794e7919f56

    • SSDEEP

      384:Jl+PkjD9+E5MFs7iui8L7zKM42pfL3iB7OxVqWFiRApkFXBLTsOZwpGN2v99Ikuo:r+CD93W03v42JiB70SVF49jocOjhQbN

    Score
    10/10
    xwormrattrojan

    • Detect Xworm Payload

    • Xworm

      Xworm is a remote access trojan written in C#.

      trojanratxworm
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks