Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
b387fc76f390a2760a5242693419f051f17a3071fd9c75ca5b9968c5253edfcf.exe
-
Size
70KB
-
Sample
241009-zw52hsycke
-
MD5
20ec0ec5f396bf72a91e5943fe426224
-
SHA1
f54cc47328f60dea7788687656992eca18336ae0
-
SHA256
b387fc76f390a2760a5242693419f051f17a3071fd9c75ca5b9968c5253edfcf
-
SHA512
b59f4dba7dbdf49eb90dea48e032ed46f81c752dd142d4fe17710296cb7d16568f4e63b814e3463f21ef213fe7602ff47e40287db06b4b1c2328bcdbdc4805a1
-
SSDEEP
1536:aZtJw+HbdXr7dJBTdVMbr/PNDyQA2w65XOxfks:aZLXRrBEbTI92LXOxfks
Behavioral task
behavioral1
Sample
b387fc76f390a2760a5242693419f051f17a3071fd9c75ca5b9968c5253edfcf.exe
Resource
win7-20240708-en
Malware Config
Extracted
xworm
wednesday-knight.gl.at.ply.gg:48312
0xF488F3FA5541d79f0b1945ccA834cD6d939dD864:1
-
Install_directory
%AppData%
-
install_file
USB.exe
Targets
-
-
Target
b387fc76f390a2760a5242693419f051f17a3071fd9c75ca5b9968c5253edfcf.exe
-
Size
70KB
-
MD5
20ec0ec5f396bf72a91e5943fe426224
-
SHA1
f54cc47328f60dea7788687656992eca18336ae0
-
SHA256
b387fc76f390a2760a5242693419f051f17a3071fd9c75ca5b9968c5253edfcf
-
SHA512
b59f4dba7dbdf49eb90dea48e032ed46f81c752dd142d4fe17710296cb7d16568f4e63b814e3463f21ef213fe7602ff47e40287db06b4b1c2328bcdbdc4805a1
-
SSDEEP
1536:aZtJw+HbdXr7dJBTdVMbr/PNDyQA2w65XOxfks:aZLXRrBEbTI92LXOxfks
-
Detect Xworm Payload
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-