Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

1376-10-0x...ry.exe

windows7-x64

1376-10-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1376-10-0x0000000000080000-0x0000000000130000-memory.dmp

  • Size

    704KB

  • MD5

    f825d1b2272ca81ac5f9e0001c42e6d0

  • SHA1

    37d94b6a902cf4666d8da7499522f6d07b238c79

  • SHA256

    9fc914a1d71c0764b83189b72b41a491846088ef3ba492a46f9a52074428826f

  • SHA512

    1d1a2d3d27110f9ade18f0cb91fad078be878b0046befe03846a65b6940945011a591370b569b96e59bbb3df721cae0376bb35e5fa24f94f742dd9a1878ff218

  • SSDEEP

    12288:ff/1RgkVxftfwpdXO95bR0xJdur3P5tbM7YRX4pjERUho2s9Ca7ItJ:v1Rgkzlfwrsd0xJa3xu7YRX4pjMcsk9

Score
10/10
rhadamanthys

Malware Config

Extracted

Family

rhadamanthys

C2

https://51.75.171.9:5151/9640d96bbead45f349f3ab9/Xteam30.api

Signatures

  • Rhadamanthys family
    rhadamanthys
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1376-10-0x0000000000080000-0x0000000000130000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.