Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    XWorm V3.0.rar

  • Size

    24.3MB

  • MD5

    5e033f5a0f950a7b5560e8f24b251f50

  • SHA1

    cb4eac72064e692c2e0489a457bb8afd12cc2eee

  • SHA256

    63fe9f7d220d295e4e0df685b4f839d0dacd50953b3548efc66e75a1f287b112

  • SHA512

    fdf52f10901d6a3c2ba0e8e011a989bd37f45ccdf65c00fe3955e1dc3b9fe165b80457f7ea1443f85e4f7a1e8eeb02a88366e4f2eb92ddfdc19ddbb3d5e8e3d1

  • SSDEEP

    786432:iKc2+qMwTyNedROWmLrDvWWrx8PXEookJd2e1:iKc2I8IZPebJ1

Score
10/10

Malware Config

Signatures

  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 38 IoCs

    Checks for missing Authenticode signature.

Files

  • XWorm V3.0.rar
    .rar

    Password: @REvil

  • XWorm V3.0/Background.png
    .png

    Password: @REvil

  • XWorm V3.0/FastColoredTextBox.dll
    .dll windows:4 windows x86 arch:x86

    Password: @REvil

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V3.0/Fixer.bat
  • XWorm V3.0/GMap.NET.Core.dll
    .dll windows:4 windows x86 arch:x86

    Password: @REvil

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V3.0/GMap.NET.WindowsForms.dll
    .dll windows:4 windows x86 arch:x86

    Password: @REvil

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V3.0/GeoIP.dat
  • XWorm V3.0/IconExtractor.dll
    .dll windows:4 windows x86 arch:x86

    Password: @REvil

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V3.0/Icons/icon (1).ico
  • XWorm V3.0/Icons/icon (10).ico
  • XWorm V3.0/Icons/icon (11).ico
  • XWorm V3.0/Icons/icon (12).ico
  • XWorm V3.0/Icons/icon (13).ico
  • XWorm V3.0/Icons/icon (14).ico
  • XWorm V3.0/Icons/icon (15).ico
  • XWorm V3.0/Icons/icon (16).ico
  • XWorm V3.0/Icons/icon (17).ico
  • XWorm V3.0/Icons/icon (2).ico
  • XWorm V3.0/Icons/icon (3).ico
  • XWorm V3.0/Icons/icon (4).ico
  • XWorm V3.0/Icons/icon (5).ico
  • XWorm V3.0/Icons/icon (6).ico
  • XWorm V3.0/Icons/icon (7).ico
  • XWorm V3.0/Icons/icon (8).ico
  • XWorm V3.0/Icons/icon (9).ico
  • XWorm V3.0/Intro.wav
  • XWorm V3.0/NAudio.dll
    .dll windows:4 windows x86 arch:x86

    Password: @REvil

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • XWorm V3.0/Plugins/ActiveWindows.dll
    .dll windows:4 windows x86 arch:x86

    Password: @REvil

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V3.0/Plugins/All-In-One.dll
    .dll windows:4 windows x86 arch:x86

    Password: @REvil

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V3.0/Plugins/Chat.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V3.0/Plugins/Clipboard.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V3.0/Plugins/FileManager.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V3.0/Plugins/FileSeacher.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V3.0/Plugins/HRDP.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V3.0/Plugins/HVNC.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V3.0/Plugins/Informations.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V3.0/Plugins/Keylogger.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V3.0/Plugins/Maps.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V3.0/Plugins/Microphone.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V3.0/Plugins/Ngrok-Disk.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V3.0/Plugins/Options.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V3.0/Plugins/Pastime.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V3.0/Plugins/Performance.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V3.0/Plugins/ProcessManager.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V3.0/Plugins/Programs.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V3.0/Plugins/Ransomware.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V3.0/Plugins/Recovery.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V3.0/Plugins/Recovery.dll.old
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V3.0/Plugins/Regedit.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V3.0/Plugins/RemoteDesktop.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V3.0/Plugins/ReverseProxy.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V3.0/Plugins/RunPE.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V3.0/Plugins/Shell.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V3.0/Plugins/StartupManager.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V3.0/Plugins/TCPConnections.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V3.0/Plugins/UACBypass.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V3.0/Plugins/VB.NET Compiler.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V3.0/Plugins/WSound.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V3.0/Plugins/WebCam.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V3.0/SimpleObfuscator.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V3.0/XWorm V3.0.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • XWorm V3.0/XWorm V3.0.exe.config
    .xml