Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
XtremeShell 4.3 Portable.exe
-
Size
9.1MB
-
Sample
240906-xgwhessemp
-
MD5
71151b0df6c008855a004b2975e3f822
-
SHA1
a07eb40d7badde7dc462c8a83d648cbdafe36acd
-
SHA256
fc44937657804765aa8a05b2faf58fca83738edcacf9bb3c64770b8fc9cb6a6f
-
SHA512
7daafaebf54ed538e109dd5b71363994967dadcf282cd05b7923a2cc9ca6adff9ba6472332cd44c9a2ee1be77b6793631b78cbd9fda1c6d5bd80ef6d63176963
-
SSDEEP
196608:hXVAqaXa6JfRYmEac7V8QW5oiwDkZUuYGZKQlX8yC3O13:hFANrYmEaCmj5oiwDkO+KdlK
Static task
static1
Behavioral task
behavioral1
Sample
XtremeShell 4.3 Portable.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
XtremeShell 4.3 Portable.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
XtremeShell 4.3 Portable.exe
-
Size
9.1MB
-
MD5
71151b0df6c008855a004b2975e3f822
-
SHA1
a07eb40d7badde7dc462c8a83d648cbdafe36acd
-
SHA256
fc44937657804765aa8a05b2faf58fca83738edcacf9bb3c64770b8fc9cb6a6f
-
SHA512
7daafaebf54ed538e109dd5b71363994967dadcf282cd05b7923a2cc9ca6adff9ba6472332cd44c9a2ee1be77b6793631b78cbd9fda1c6d5bd80ef6d63176963
-
SSDEEP
196608:hXVAqaXa6JfRYmEac7V8QW5oiwDkZUuYGZKQlX8yC3O13:hFANrYmEaCmj5oiwDkO+KdlK
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Power Settings
powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.
-