Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

d8a9c1bc61...58.exe

windows7-x64

1

d8a9c1bc61...58.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d8a9c1bc61784e7102b94bf3c2425fbeab721ec6865e4c44a08a812112a6ee58

  • Size

    164KB

  • MD5

    37349dfd82396b9d03ee2470bfc0ebfa

  • SHA1

    7277772254b3064d7f6a2ef46c6052fb94eeb255

  • SHA256

    d8a9c1bc61784e7102b94bf3c2425fbeab721ec6865e4c44a08a812112a6ee58

  • SHA512

    d3be396d7ce84acece7a0a2446d018646b064a6ece7580db5e2caf6ffce6968bac469e7f395ce5c8d0ea3ce30452566078815eb902476ea4ab57330e1ecc684d

  • SSDEEP

    3072:AiwX2EEJFADmTpUet/2SlqNILZ9r6MhJM0Nd2t8:YCYEpUA+3NILZ/G0S

Score
10/10
ratfhuhxloader

Malware Config

Extracted

Family

xloader

Version

2.5

Campaign

fhuh

Decoy

legalraleigh.com

kodaikeiko.com

pptmarketplace.com

theinvestmenthorse.com

quiubit.net

theresashelley.top

watchlivestream4k.xyz

heinousas.com

menggaodui.com

interstellar-art.com

com-junction.com

thebugkitchen.com

poppyfox.top

itsmeekasheilou.com

vtooland.com

minogratio.com

familyfixins.biz

nihonno-okami.com

yefiafrica.com

chokeonwords.com

Signatures

  • Xloader family
    xloader
  • Xloader payload 1 IoCs
    rat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d8a9c1bc61784e7102b94bf3c2425fbeab721ec6865e4c44a08a812112a6ee58
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections