Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

9473c77760...28.exe

windows7-x64

1

9473c77760...28.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9473c77760fb1d49135b25c9022e83e7366189878fd35222f82b8e1a79729c28

  • Size

    164KB

  • MD5

    3d5ed3ad9018f00c639a26356d06b765

  • SHA1

    19aad984bb5fe0cd9486f13bc280c8044a072774

  • SHA256

    9473c77760fb1d49135b25c9022e83e7366189878fd35222f82b8e1a79729c28

  • SHA512

    73b6482705dbc5b16495c008ce8d5cc0698dc0d97e98ca7510a0629d97b2bd9339636f2dad5f9f632d62f38270609305c2aa6d6520006c6661994232cf795099

  • SSDEEP

    3072:fIpOFNH23cYnLsBAMphs0F3P6idLkoHKrPH3pLn2myZMBqw8SQ34:fBF0YmMpS0CidgoHKLH3p6mykR8j

Score
10/10
ratiedixloader

Malware Config

Extracted

Family

xloader

Version

2.5

Campaign

iedi

Decoy

taschenhimmel.guru

nychehang.com

samrgov.xyz

lumenharleystreet.com

286241.com

herramientaspcdigitales.com

collegesecurityroadshow.com

fcpt.club

iphone13promax.art

karmikdevco.com

melanin4mermaidstalks.com

550-29th.com

bsthuy24h.com

desertmermaidcreations.com

fifi8.xyz

interweavelife.com

onlylands.icu

freemanengenharia.com

referralinstituteatlanta.com

dugerits.com

Signatures

  • Xloader family
    xloader
  • Xloader payload 1 IoCs
    rat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9473c77760fb1d49135b25c9022e83e7366189878fd35222f82b8e1a79729c28
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections