Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

10238a6fb5...fN.exe

windows7-x64

10

10238a6fb5...fN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    10238a6fb5b5c98488255bf8db194fcba7635d2a0e0e4913e5cc593a7a84245fN.exe

  • Size

    37KB

  • MD5

    db341c806e9ad9b3b6bb394b0ad3c190

  • SHA1

    08018e1d7808828951c03663d55a7d1256046e96

  • SHA256

    10238a6fb5b5c98488255bf8db194fcba7635d2a0e0e4913e5cc593a7a84245f

  • SHA512

    476268ac10037a47aeb10ab4b3a95e44800a05221f04d20885adb36359af88e46f12633a0777da314ac783d87cf78fc8f16d3f975b522978995968bea8829d17

  • SSDEEP

    384:0G1LPXqrLNpOCSYSP9zoHtLZXwq7g5aOKNnwg/pBrCJLqm3AXkrhpkF0+LTRZwdm:JPaZc55K6sAom3AUoFW9ggO1hDQM/

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

Mutex

Nen131aoFM2x3zyi

Attributes
  • Install_directory

    %AppData%

  • install_file

    OKEAN.exe

  • pastebin_url

    https://pastebin.com/raw/b28eXjCB

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 10238a6fb5b5c98488255bf8db194fcba7635d2a0e0e4913e5cc593a7a84245fN.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections