Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    080f2b79fd409cbe0cc46184d64a7127b8108d25f76977831f54f493fa25ed49

  • Size

    164KB

  • MD5

    a8e60706705ae0cc31a181d61531ef67

  • SHA1

    944e86aa1e55d8dbf07432926ec254e5cd446cba

  • SHA256

    080f2b79fd409cbe0cc46184d64a7127b8108d25f76977831f54f493fa25ed49

  • SHA512

    309d70900fa2eb26477e173dbf7de856b9657d957dc92b0172604fd0e7ee90d6506fa3c2bb729238166343e77f28c9b047bcca78e5d12f05fd2fc96d676a2e0c

  • SSDEEP

    3072:g3J2aj2FnQ8oFnBjMK1pJ3aGx0g9KF2PmN133NU3lBJLT6zuF5+Rs0L4:gMlIVMK1fKGf9Y2PmwT6qF5+Rs0L

Score
10/10

Malware Config

Extracted

Family

xloader

Version

2.5

Campaign

eoww

Decoy

easyimmigrationlaw.com

wacopumpkins.com

calgarypublishing.com

qiaopidh.xyz

shandongludong.com

designhandns.com

sattadelhiborder42.xyz

glitchpunks.art

weihlin.com

beargreasers.com

fml5g61gn.xyz

cambriancryptos.com

goodshop--------gs.com

itba3ly.com

weiduapi.com

dex-directory.xyz

orderinformantsender.site

budistx.com

wit-un.com

sayabol.com

Signatures

  • Xloader family
  • Xloader payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 080f2b79fd409cbe0cc46184d64a7127b8108d25f76977831f54f493fa25ed49
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections