Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    4696c215faee4233a32ed9d6d76ff8a9e71ef1899280f689222b564c2069e51b

  • Size

    164KB

  • MD5

    bf3ff4eacc21daa94c2eacc9977bcb9c

  • SHA1

    cf94cd8d8ffb7b1e191bfd27a42e721191fba819

  • SHA256

    4696c215faee4233a32ed9d6d76ff8a9e71ef1899280f689222b564c2069e51b

  • SHA512

    1a19bfe3db30b9f09819e9d60ab0bfb7d58207005950806d4fa7a627def09509c46991f97a0d869ba4e45c5945dbd3eba624489b6f5fcd04a50638f88ad77b41

  • SSDEEP

    3072:cMpfA+O2j521b+vMC6eFsPo0Cti9vfOCZPzDLu6QPAqH7GuUqqrW:c4AKawMCZsQ9ti9nOChPIAW

Score
10/10

Malware Config

Extracted

Family

xloader

Version

2.5

Campaign

pot0

Decoy

zjyylzll.com

adstore.online

4dflexipro.com

floridacaterpillar.com

yokoothai.com

cardealdistribuidora.com

93robot.com

aftok.net

jinzoboko.com

just-win.today

hauzit.xyz

retreatinthenature.com

moskovskiedevchenki24.com

bet2.info

evertownapartments.net

hackensackmovers.com

charlizz.com

pordges.com

retrorecycling.com

martynbarretthospitality.com

Signatures

  • Xloader family
  • Xloader payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4696c215faee4233a32ed9d6d76ff8a9e71ef1899280f689222b564c2069e51b
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.