Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

8c4d097eb2...3d.exe

windows7-x64

1

8c4d097eb2...3d.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8c4d097eb277376e6bd7068ab223f63d86b6b6acecbe26d7523038a1af1d933d

  • Size

    164KB

  • MD5

    8d8f2d4adca05305c14df07a6400b0be

  • SHA1

    956fa42fad72fdce9a50c72291a1768c57c6c1cd

  • SHA256

    8c4d097eb277376e6bd7068ab223f63d86b6b6acecbe26d7523038a1af1d933d

  • SHA512

    6ef5681fe07bb5d834fa83c1f38b8bd5ccefbc36db816a3dfaffa3b0d586d4e771b533218b8c2f6e8e37f0d92713a5a3fe289ec9b6bb556b7b59e5c15f724d6a

  • SSDEEP

    3072:kpGxyWbPwTEEdf+oFuxpVARbqNmX+BiCGmcZigpmuWlq:dEC0uxLUONmXvmckFu

Score
10/10
ratpvxzxloader

Malware Config

Extracted

Family

xloader

Version

2.5

Campaign

pvxz

Decoy

imt-token.club

abravewayocen.online

shcloudcar.com

mshoppingworld.online

ncgf08.xyz

stuinfo.xyz

wesavetheplanetofficial.com

tourbox.xyz

believeinyourselftraining.com

jsboyat.com

aaeconomy.info

9etmorea.info

purosepeti7.com

goticketly.com

pinkmemorypt.com

mylifewellnesscentre.com

iridina.online

petrestore.online

neema.xyz

novelfooditalia.com

Signatures

  • Xloader family
    xloader
  • Xloader payload 1 IoCs
    rat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8c4d097eb277376e6bd7068ab223f63d86b6b6acecbe26d7523038a1af1d933d
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections