Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Allahuakbhar.exe

  • Size

    77KB

  • MD5

    e7fd6b1a892fd620ec44a5da923104c5

  • SHA1

    946dde2d5ab0bcb324105d5cd4e77f49caa71d41

  • SHA256

    3c59aab1d78ab654a8057e2b9ea62a11ca35a0a552341a5f2f4cb3e663b2dfae

  • SHA512

    07daf19e08665896e5239180260c1b952bf89b008565f14ceed750b3ba120d8eb5ab1f46bff0b0320fe12f7b1bf07a293d4f5bf9d619c8046115d7794a33fb0f

  • SSDEEP

    1536:eQTRNc/CwmN17IpbrJ3Gm6Wa6k6U4OVKNdATHYcZ7:eQTRN7Qbrw6U4OVyeTHYs7

Score
10/10

Malware Config

Extracted

Family

xworm

Attributes
  • Install_directory

    %AppData%

  • install_file

    Allahuakbhar.exe

  • pastebin_url

    https://pastebin.com/raw/H3wFXmEi

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Allahuakbhar.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections