Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

1732341065...ed.exe

windows7-x64

10

1732341065...ed.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    17323410655ae3bc20b42773c837d313a5d1c4b46f6f4ea06ba708b73c62c28a0cb576828e322.dat-decoded.exe

  • Size

    45KB

  • MD5

    15f9fbe4d824f398f3910440711964aa

  • SHA1

    268cbaf9557825a089533a0eaf15f13d1eb80dab

  • SHA256

    ebb56c98f57ee869f385d1b04d04e99ba5fe78964c915c6bd4b089438cfd8c76

  • SHA512

    da5f34f3e597265688afe1f3cdc97a5dcd1b8dbed1bdd74f61460462f84f91c94dec34df80935b69c468f532182ce0871606234b1c18ee8efd5603c786eba586

  • SSDEEP

    768:QdhO/poiiUcjlJIncFH9Xqk5nWEZ5SbTDaXWI7CPW5J:Cw+jjgnsH9XqcnW85SbTWWIR

Score
10/10
xenorat

Malware Config

Extracted

Family

xenorat

C2

importns24.duckdns.org

Mutex

imports

Attributes
  • install_path

    nothingset

  • port

    2424

  • startup_name

    nothingset

Signatures

  • Detect XenoRat Payload 1 IoCs
  • Xenorat family
    xenorat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 17323410655ae3bc20b42773c837d313a5d1c4b46f6f4ea06ba708b73c62c28a0cb576828e322.dat-decoded.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.