Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    dd.exe

  • Size

    65KB

  • MD5

    3656e7ce0ef34b60dc1312a2f4158f99

  • SHA1

    90474d1c1b69aa23aa52ab848e570a978e0e4ee0

  • SHA256

    0c8d4f1c691321cae119c1b75f442fcd368c72622b44f238c6ffda553ff9532a

  • SHA512

    03894a0b129a1cff9daa8c04d058da83d9df38f0dd7893c533d79ee969b5536ee92611551c25c739a75331f860b88fe5216bdb9f517dcd53886ac2dcb87dccb5

  • SSDEEP

    1536:lEBUcA5UtEa3FwkVaACZa+bmx7xVtOOYAc6uW:K2baHQACk+bmt4OYAR

Score
10/10

Malware Config

Extracted

Family

xworm

C2

fri-potential.gl.at.ply.gg:33550

Attributes
  • Install_directory

    %ProgramData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dd.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections