Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

01d6973e99...b4.exe

windows7-x64

1

01d6973e99...b4.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    01d6973e99e9a62f6b69b238d5a8b748c0eee137bfbababf5bdd21e262fed5b4

  • Size

    168KB

  • MD5

    146ad9007dc6a6a473234d8cd22632bd

  • SHA1

    e732b2fc6b3d432a2c85fd169e4e773cf06efee4

  • SHA256

    01d6973e99e9a62f6b69b238d5a8b748c0eee137bfbababf5bdd21e262fed5b4

  • SHA512

    1cf466fbaf67727bab7e7728220b85e0a14ad81d1e3f4eb92f1afce6dc0acda70f2e03464514328268cc7fbf706a93f8d1946520616ace8668a73dc3254180c4

  • SSDEEP

    3072:K6Jdz+jrSyL18DGaMSxyTmXMY3uxG5uAqSAHxh45ppABOB1m:Kco49MScyXMY3uxfCZ3+OB1

Score
10/10
ratte4sxloader

Malware Config

Extracted

Family

xloader

Version

2.5

Campaign

te4s

Decoy

atlantahousingsolutions.com

loharukaurbanvistas.com

30northcoffee.com

978611.com

aflawlesshealth.com

cannabisreef.store

natureswrathbeatsapperal.com

a6moto.com

1kingbet.com

cabinetfuid.com

0le2rwczg.com

horkinator.online

financecost.net

mailers411.com

arkdecs.com

moretraffic.online

inthekitchenshakinandbakin.com

998451.com

bonuschoices.com

astraherb.com

Signatures

  • Xloader family
    xloader
  • Xloader payload 1 IoCs
    rat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 01d6973e99e9a62f6b69b238d5a8b748c0eee137bfbababf5bdd21e262fed5b4
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections