Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
03b3e55e48dc325841a70d4c914e699fc62e0de6cc6c53060758bdcc00785857.exe
-
Size
54KB
-
Sample
250120-gtht4avpaj
-
MD5
ae08bc78c52d442113be43d884ad2dce
-
SHA1
66ae36622600059e575a1b7430b5d440ed23cf75
-
SHA256
03b3e55e48dc325841a70d4c914e699fc62e0de6cc6c53060758bdcc00785857
-
SHA512
1c077214e9eac732ca924fbc1a01aeb5e339b3faca25d598f4b9111d62a2bab1e53f6ccba1b88888118a65af63e88625b9a3365091c454635c57c0caccb78501
-
SSDEEP
768:/dhO/poiiUcjlJInvvH9Xqk5nWEZ5SbTDaJWI7CPW5TW/NK+oWPO:1w+jjgn3H9XqcnW85SbTAWIi/Y+oaO
Behavioral task
behavioral1
Sample
03b3e55e48dc325841a70d4c914e699fc62e0de6cc6c53060758bdcc00785857.exe
Resource
win7-20241023-en
Malware Config
Extracted
xenorat
127.0.0.1
Xeno_rat_nd8912d
-
delay
5000
-
install_path
nothingset
-
port
4444
-
startup_name
nothingset
Targets
-
-
Target
03b3e55e48dc325841a70d4c914e699fc62e0de6cc6c53060758bdcc00785857.exe
-
Size
54KB
-
MD5
ae08bc78c52d442113be43d884ad2dce
-
SHA1
66ae36622600059e575a1b7430b5d440ed23cf75
-
SHA256
03b3e55e48dc325841a70d4c914e699fc62e0de6cc6c53060758bdcc00785857
-
SHA512
1c077214e9eac732ca924fbc1a01aeb5e339b3faca25d598f4b9111d62a2bab1e53f6ccba1b88888118a65af63e88625b9a3365091c454635c57c0caccb78501
-
SSDEEP
768:/dhO/poiiUcjlJInvvH9Xqk5nWEZ5SbTDaJWI7CPW5TW/NK+oWPO:1w+jjgn3H9XqcnW85SbTAWIi/Y+oaO
-
Detect XenoRat Payload
-
Xenorat family
-