Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

d8a9c1bc61...58.exe

windows7-x64

1

d8a9c1bc61...58.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d8a9c1bc61784e7102b94bf3c2425fbeab721ec6865e4c44a08a812112a6ee58

  • Size

    164KB

  • Sample

    241121-yxtt7s1kfj

  • MD5

    37349dfd82396b9d03ee2470bfc0ebfa

  • SHA1

    7277772254b3064d7f6a2ef46c6052fb94eeb255

  • SHA256

    d8a9c1bc61784e7102b94bf3c2425fbeab721ec6865e4c44a08a812112a6ee58

  • SHA512

    d3be396d7ce84acece7a0a2446d018646b064a6ece7580db5e2caf6ffce6968bac469e7f395ce5c8d0ea3ce30452566078815eb902476ea4ab57330e1ecc684d

  • SSDEEP

    3072:AiwX2EEJFADmTpUet/2SlqNILZ9r6MhJM0Nd2t8:YCYEpUA+3NILZ/G0S

Score
10/10
xloaderfhuhdiscoveryrat

Malware Config

Extracted

Family

xloader

Version

2.5

Campaign

fhuh

Decoy

legalraleigh.com

kodaikeiko.com

pptmarketplace.com

theinvestmenthorse.com

quiubit.net

theresashelley.top

watchlivestream4k.xyz

heinousas.com

menggaodui.com

interstellar-art.com

com-junction.com

thebugkitchen.com

poppyfox.top

itsmeekasheilou.com

vtooland.com

minogratio.com

familyfixins.biz

nihonno-okami.com

yefiafrica.com

chokeonwords.com

Targets

    • Target

      d8a9c1bc61784e7102b94bf3c2425fbeab721ec6865e4c44a08a812112a6ee58

    • Size

      164KB

    • MD5

      37349dfd82396b9d03ee2470bfc0ebfa

    • SHA1

      7277772254b3064d7f6a2ef46c6052fb94eeb255

    • SHA256

      d8a9c1bc61784e7102b94bf3c2425fbeab721ec6865e4c44a08a812112a6ee58

    • SHA512

      d3be396d7ce84acece7a0a2446d018646b064a6ece7580db5e2caf6ffce6968bac469e7f395ce5c8d0ea3ce30452566078815eb902476ea4ab57330e1ecc684d

    • SSDEEP

      3072:AiwX2EEJFADmTpUet/2SlqNILZ9r6MhJM0Nd2t8:YCYEpUA+3NILZ/G0S

    Score
    3/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks