Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    BootstrapperNew.exe

  • Size

    68KB

  • MD5

    ba06c09b1c72827d265103eb77ec4e51

  • SHA1

    1248cc8e569ba391e556a978a4c525facf98f1de

  • SHA256

    6f7de381f35a662b0dc78422c670bc02ea0ea90ea8565d577d938d9ac296b239

  • SHA512

    8bdf160406cc6e43fa45098ad732fc59e600d72274ed50471745a9ecc0fee33b4d188e83559b71fa8c40e6ca8997b7c0fe1c4553ccd7e80657a6cce4c9b5cf89

  • SSDEEP

    1536:79uMdFE7rHp4xOXyPE9npfUW/boDmuk62fMDO/OzS:7E7e1uUW/boDwfMDO/mS

Score
10/10

Malware Config

Extracted

Family

xworm

C2

anti-dude.gl.at.ply.gg:33648

Attributes
  • Install_directory

    %AppData%

  • install_file

    System.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • BootstrapperNew.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections