Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
scieczek.exe
-
Size
34KB
-
Sample
240928-khdyjsyfkh
-
MD5
6d50cc8357e2d82f1cb48e4355dab4ff
-
SHA1
7e1b6cdc6608406caffcfc4beac3fdadc61671e7
-
SHA256
b33a3947a9e557981c3cf132f5ec62992edb1202375db16c2dc2a7be1400ee37
-
SHA512
3fd300c9384ef472e2bb03087dd882a2e17a0f9f1086f3db4d9ad0508a00e659807a745a2064aed1132d593ac69cbc6bfda80e6476ac375ce7bdf091a1f689e5
-
SSDEEP
384:eSyXlquOae6oKoBmoDnnGvBLmlvCwvHixdTD2VR8pkFTBLTIZwYGDcvw9Ikuis1K:VyXiBDAtYvC4CaV9FZ9jkOjhW/4D
Behavioral task
behavioral1
Sample
scieczek.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
xworm
5.0
lefferek-42016.portmap.host:61672
budget-compiled.gl.at.ply.gg:61672
9U3xtr7TJf46p5TY
-
Install_directory
%AppData%
-
install_file
DiscordClient.exe
Targets
-
-
Target
scieczek.exe
-
Size
34KB
-
MD5
6d50cc8357e2d82f1cb48e4355dab4ff
-
SHA1
7e1b6cdc6608406caffcfc4beac3fdadc61671e7
-
SHA256
b33a3947a9e557981c3cf132f5ec62992edb1202375db16c2dc2a7be1400ee37
-
SHA512
3fd300c9384ef472e2bb03087dd882a2e17a0f9f1086f3db4d9ad0508a00e659807a745a2064aed1132d593ac69cbc6bfda80e6476ac375ce7bdf091a1f689e5
-
SSDEEP
384:eSyXlquOae6oKoBmoDnnGvBLmlvCwvHixdTD2VR8pkFTBLTIZwYGDcvw9Ikuis1K:VyXiBDAtYvC4CaV9FZ9jkOjhW/4D
-
Detect Xworm Payload
-
Drops startup file
-