Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    weafasdfawef.exe

  • Size

    45KB

  • MD5

    7c0981b33bb05e403e6dafbfb15f245e

  • SHA1

    0d85fd3a8c5de8bce1e9e5595d2882491cab3e51

  • SHA256

    d54bd79976a9cfef49e8ae530437fd657e3c2125623b8c26049f95a77da9b0ea

  • SHA512

    bb57ef8f6489b4fe0c2f8f02d2fde38c5398c80296af53c2c34909e02a5a0e042dcd22d0a08c36b40c4e5816cb5334b55e802e67a8cb699df25a183b435dd96a

  • SSDEEP

    768:xdhO/poiiUcjlJInlzH9Xqk5nWEZ5SbTDaYWI7CPW5V:vw+jjgndH9XqcnW85SbTZWId

Score
10/10

Malware Config

Extracted

Family

xenorat

C2

192.168.1.129

Mutex

MERRYCHEESEMAS

Attributes
  • delay

    5000

  • install_path

    appdata

  • port

    8888

  • startup_name

    Windows

Signatures

  • Detect XenoRat Payload 1 IoCs
  • Xenorat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • weafasdfawef.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.