Overview

overview

10

Static

static

10

RevoUninst...up.exe

windows10-2004-x64

RevoUninst...up.exe

windows11-21h2-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    RevoUninstaller PRO Setup.exe

  • Size

    158KB

  • MD5

    a16f48279d17df11310f098fcd977073

  • SHA1

    65bde058b2e7c4bb73e1435529d410fd0a7eae90

  • SHA256

    adf324baf8232de3bbdc056315c707bcfacebcde3bbb16e59bfce80d9e5a9579

  • SHA512

    bb1ab52ee147cc78b5698a42327eaf0f28f3010b30197e221dbd7e5ca61927610f0ff1d15176f13c14c3c863f1a530bd33cd92c15ee9b15e37cdc6d542049da3

  • SSDEEP

    3072:rHQgeY5aitkbDVe2GOz099qBz65/M6If+3Js+3JFkKeTnQ:k9Y5xObVIOxBt25

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Attributes
  • Install_directory

    %AppData%

  • install_file

    ZoneAlarm Firewall.exe

  • pastebin_url

    https://pastebin.com/raw/mmSQvr1V

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • RevoUninstaller PRO Setup.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections