Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    488942ee93eaea62fdd92fed0d6853a66c75b55af6952f9e2f6651c2097e4250

  • Size

    252KB

  • Sample

    250325-3zxq4axrw7

  • MD5

    4fb296b647e97520c1d8e794a7721d9f

  • SHA1

    21c47b7e08f1b2aa8c44d9a693cc984110f7ac33

  • SHA256

    488942ee93eaea62fdd92fed0d6853a66c75b55af6952f9e2f6651c2097e4250

  • SHA512

    b3f07df20195fbf156f8d324f0830281c1273bd95aef077804cbf8d2ff322a6c6bf84966c99a8f9f57f3893cae7136946e5b10c8423dfbe72aeca0f7f512d511

  • SSDEEP

    6144:J4cVlpkU7I2lJnqd5qaqb4Aoe7HIJ4FU2bj:Bp73v8AaK7ouHiYD

Score
10/10

Malware Config

Extracted

Family

xenorat

C2

127.0.0.1

Targets

    • Target

      488942ee93eaea62fdd92fed0d6853a66c75b55af6952f9e2f6651c2097e4250

    • Size

      252KB

    • MD5

      4fb296b647e97520c1d8e794a7721d9f

    • SHA1

      21c47b7e08f1b2aa8c44d9a693cc984110f7ac33

    • SHA256

      488942ee93eaea62fdd92fed0d6853a66c75b55af6952f9e2f6651c2097e4250

    • SHA512

      b3f07df20195fbf156f8d324f0830281c1273bd95aef077804cbf8d2ff322a6c6bf84966c99a8f9f57f3893cae7136946e5b10c8423dfbe72aeca0f7f512d511

    • SSDEEP

      6144:J4cVlpkU7I2lJnqd5qaqb4Aoe7HIJ4FU2bj:Bp73v8AaK7ouHiYD

    Score
    10/10
    • Detect XenoRat Payload

    • XenorRat

      XenorRat is a remote access trojan written in C#.

    • Xenorat family

MITRE ATT&CK Matrix

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.