Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

Xeno[1].exe

windows11-21h2-x64

10

Restructur...Ad.cda

windows11-21h2-x64

1

Restructur...es.cda

windows11-21h2-x64

1

Restructur...go.cda

windows11-21h2-x64

1

Restructur...ck.cda

windows11-21h2-x64

1

Restructur...nk.cda

windows11-21h2-x64

1

Restructur...ic.cda

windows11-21h2-x64

1

Restructur...ng.cda

windows11-21h2-x64

1

Restructur...lk.cda

windows11-21h2-x64

1

Restructur...ty.cab

windows11-21h2-x64

1

Avenue

windows11-21h2-x64

1

Chi

windows11-21h2-x64

1

Congratulations

windows11-21h2-x64

1

Cw

windows11-21h2-x64

1

Devices

windows11-21h2-x64

1

Drivers

windows11-21h2-x64

1

Emails

windows11-21h2-x64

1

Independently

windows11-21h2-x64

1

Levy

windows11-21h2-x64

1

Moments

windows11-21h2-x64

1

Purchased

windows11-21h2-x64

1

They

windows11-21h2-x64

1

Restructur...st.cda

windows11-21h2-x64

1

Restructur...um.cda

windows11-21h2-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Xeno[1].exe

  • Size

    1.3MB

  • MD5

    0435617ec5199d7968cfe3aa59b00dd9

  • SHA1

    6391174a55a9f12ce962f62fad945fcc13456526

  • SHA256

    4919eb2ba14a5320af7060ec482746ad471d43e649a80965b3fdecc768dd2511

  • SHA512

    c1bc509ac05a6f0fa6440eca3ae78b302163a4b788d3d7b1f8ba1a74e11e784b365ca7c4ca09ccdfc2744d4903deffc08f7d38d4d26b3fcc8cbb061c2e7f08ff

  • SSDEEP

    24576:D3uitxLGgKbQO5adoRsKBL5sTAPCCkMnoMtq61jBa+g2e1J6s0vCm9K/1D2tIs+W:jrxXKbJadaJ5D3J/DxU+gr1Juam09mIC

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Xeno[1].exe
    .exe windows:4 windows x86 arch:x86

    Password: xeno

    56a78d55f3f7af51443e58e0ce2fb5f6


    Headers

    Imports

    Sections

  • RestructuringStorage/Ad.cda
  • RestructuringStorage/Candles.cda
  • RestructuringStorage/Cargo.cda
  • RestructuringStorage/Click.cda
  • RestructuringStorage/Drunk.cda
  • RestructuringStorage/Garlic.cda
  • RestructuringStorage/Learning.cda
  • RestructuringStorage/Milk.cda
  • RestructuringStorage/Quality.cda
    .cab

    Password: xeno

  • Avenue
  • Chi
  • Congratulations
  • Cw
  • Devices
  • Drivers
  • Emails
  • Independently
  • Levy
  • Moments
  • Purchased
  • They
  • RestructuringStorage/Tourist.cda
  • RestructuringStorage/Zum.cda