Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

bb68872c57...da.exe

windows7-x64

1

bb68872c57...da.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bb68872c573d3b43e624ab00d8bb795a739372f552f68fc78fd1051ed4f7d1da

  • Size

    164KB

  • MD5

    4b3b9cdb73b57f6c5669fb7db7d4003a

  • SHA1

    df69699c0a5d17b546989c3984546563e8cf0083

  • SHA256

    bb68872c573d3b43e624ab00d8bb795a739372f552f68fc78fd1051ed4f7d1da

  • SHA512

    c8c74e25156747c6404429c297f5edffe9a80c4fd08f29d802fd45c8bbf3b14d439c04680079336371b90ecb95b147b1af08ece92e23e33a385764f4f6eca409

  • SSDEEP

    3072:1mJr72KS8haF1MvY1XSsZrtJbi8rnWRVm5+/evKMVd1437weg:16+BTMv6CcrtJbi8rneV1/uDW3Ee

Score
10/10
ratdgi3xloader

Malware Config

Extracted

Family

xloader

Version

2.5

Campaign

dgi3

Decoy

wulkan-officialsite.online

jessicapedrowedding.com

xn--80aac8axjbcq1j.xn--p1acf

feoqm.online

ariseconclave.com

shangjia.guru

drkrose.com

certifiedprotradebot.icu

49gjm.xyz

genesisporhwr.xyz

meraksponsoru.com

leaguerysxfwl.xyz

silverearthmetal.com

soupbowlnetworkllc.com

benovacam.com

tresorsdeganesh.com

youluf.com

ipodplus.net

opexlatinamericaninstitute.com

costaesobrinho.com

Signatures

  • Xloader family
    xloader
  • Xloader payload 1 IoCs
    rat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bb68872c573d3b43e624ab00d8bb795a739372f552f68fc78fd1051ed4f7d1da
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections