Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b676dadc109d8b1322111502103a943073180b3daa78a04637448b148730736d.exe

  • Size

    46KB

  • MD5

    8462795ada587c3bccdb59c2f48e5bfe

  • SHA1

    ae155c1d78ba4adfbfe5aa022a2deb725fc1dc9a

  • SHA256

    b676dadc109d8b1322111502103a943073180b3daa78a04637448b148730736d

  • SHA512

    7860b4447fe17084e0225a052d9712b3fe332cdd6e4f59d1057e4613c07c416f1cfe36c1a49bf0f631a4289ac49fb24518c63fb03ed7a6df2af832361e764ff6

  • SSDEEP

    768:qdhO/poiiUcjlJInfFH9Xqk5nWEZ5SbTDa/WI7CPW5w:Mw+jjgnNH9XqcnW85SbT+WII

Score
10/10

Malware Config

Extracted

Family

xenorat

C2

62.133.174.224

Mutex

RuntimeBroker

Attributes
  • delay

    500

  • install_path

    appdata

  • port

    3056

  • startup_name

    RuntimeBroker

Signatures

  • Xenorat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b676dadc109d8b1322111502103a943073180b3daa78a04637448b148730736d.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.