Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    21a386b124384a6b9e6254fa6bcb6a4866724964a9ee121ecfeecfcac7ea479d

  • Size

    30KB

  • MD5

    05e9cace4f1867de101f2c1107e2331c

  • SHA1

    5aa14f63015628a7a58348a90d9a00f259dab637

  • SHA256

    21a386b124384a6b9e6254fa6bcb6a4866724964a9ee121ecfeecfcac7ea479d

  • SHA512

    0faee9ed30e3fd658503aabf5c212c7bd68a8dc3c62e080d698afbb9760b5b998108bd1e6f95ed5ce5d473eab0c54b561d5fcd0876710af8f2f48d2b71aff855

  • SSDEEP

    768:552AXcb9duQphJn2VbEPIQpUFyG9R7Ojhf0zl:vXcbdp32iPIQmFv9R7Oje

Score
10/10

Malware Config

Extracted

Family

xworm

C2

topics-locator.gl.at.ply.gg:44893

Mutex

rH0LFOjMitPYbsvR

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

aes.plain
1
U+B+zQ8CKVl0zit7SU+58g==

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 21a386b124384a6b9e6254fa6bcb6a4866724964a9ee121ecfeecfcac7ea479d
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.