Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

1bdf66ed56...29.exe

windows7-x64

1

1bdf66ed56...29.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1bdf66ed5667345edc2315122a60838baa3839f8e254ad73912bc3af9da17529

  • Size

    164KB

  • Sample

    241121-y8ppma1pgn

  • MD5

    7a25e16b7c2172ba51905eb2774be99c

  • SHA1

    bfcdd76c1feef665d22324af6c6fd0f00f4cda82

  • SHA256

    1bdf66ed5667345edc2315122a60838baa3839f8e254ad73912bc3af9da17529

  • SHA512

    8c8cc0b17aa63c9f2cbbd1deb47995f84002e819968f139c1dcde31708ebade2dac29dbd90c92f82dd64e833b04b908a87e30a2e403181910d732b9e9e2ed299

  • SSDEEP

    3072:VFpEY2OeWfr0EM95qqoftLkuDoEiRQOKPnZC5zm9IbG7nOs:V8BUFM9ArftLkuDoj6OKPZC1mP

Score
10/10
xloadermwfcdiscoveryrat

Malware Config

Extracted

Family

xloader

Version

2.5

Campaign

mwfc

Decoy

a-great-intl-voip-phones.zone

police-trust-security.com

415391.com

coi-sl.com

liming-steel.com

criticalracetheoryexplained.com

pintoent.com

columbusrx.com

clarktribe.net

texasforblanchard.com

musical.voyage

priyamblogs.com

employbridge.works

americanchessmaster.com

australiaaddictioncenters.com

drkell-yann.xyz

barryisdaner.com

frankkystein.art

aromatoto7.com

alsuwal.com

Targets

    • Target

      1bdf66ed5667345edc2315122a60838baa3839f8e254ad73912bc3af9da17529

    • Size

      164KB

    • MD5

      7a25e16b7c2172ba51905eb2774be99c

    • SHA1

      bfcdd76c1feef665d22324af6c6fd0f00f4cda82

    • SHA256

      1bdf66ed5667345edc2315122a60838baa3839f8e254ad73912bc3af9da17529

    • SHA512

      8c8cc0b17aa63c9f2cbbd1deb47995f84002e819968f139c1dcde31708ebade2dac29dbd90c92f82dd64e833b04b908a87e30a2e403181910d732b9e9e2ed299

    • SSDEEP

      3072:VFpEY2OeWfr0EM95qqoftLkuDoEiRQOKPnZC5zm9IbG7nOs:V8BUFM9ArftLkuDoj6OKPZC1mP

    Score
    3/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.