Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    XWorm V5.6.zip

  • Size

    31.6MB

  • MD5

    48cc55958b3cfb76d25e4eb106fdba25

  • SHA1

    fe32ba2482da059e7f8efc534c5748a1097b3a71

  • SHA256

    5d399a5bdccc825b3073644e926666915867056b442b113f4fba8323deec2e26

  • SHA512

    21b123d315adc0cf4eaadbf6e55e3c513086e6ce16fd14fce4ca891a9c4dc245a61af2418cea4bacef226646b0ecbafd8650ad7645df61bf695804d34812d4f5

  • SSDEEP

    786432:gtPElxz7xTWaXyzbswVe6iuOgiEaQZJTtNEgIMPPh4tm7h:sInxTWaXyzbJY5EhJTtNoe3

Score
10/10

Malware Config

Signatures

  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

  • Detect Xworm Payload 1 IoCs
  • StormKitty payload 1 IoCs
  • Stormkitty family
  • Xworm family
  • Unsigned PE 45 IoCs

    Checks for missing Authenticode signature.

Files

  • XWorm V5.6.zip
    .zip
  • XWorm V5.6/Background.png
    .png
  • XWorm V5.6/ClientsFolder/C8E3E96934F7AE51B353/Recovery/Telegram_tdata_12-21-2024 06;45;01;763.zip
    .zip
  • C3DF1BA00CB8D8A7s
  • D877F783D5D3EF8C/14544B3950E536B7s
  • D877F783D5D3EF8C/538D2865B230EC0Es
  • D877F783D5D3EF8C/8E62C07CC85B8498s
  • D877F783D5D3EF8C/A08CAAF53E6A3825s
  • D877F783D5D3EF8C/C1434ADEFD3C558Cs
  • D877F783D5D3EF8C/CD77B781894EB8F9s
  • D877F783D5D3EF8C/D42151189EFA8E60s
  • D877F783D5D3EF8C/E17C2A776FFD7F9Fs
  • D877F783D5D3EF8C/E23A794549610555s
  • D877F783D5D3EF8C/configs
  • D877F783D5D3EF8C/maps
  • D877F783D5D3EF8Cs
  • EE82624050CBC41Fs
  • key_datas
  • settingss
  • usertag
  • XWorm V5.6/ClientsFolder/C8E3E96934F7AE51B353/Recovery/WifiKeys_12-21-2024 06;45;46;104.txt
  • XWorm V5.6/FastColoredTextBox.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.6/Fixer.bat
  • XWorm V5.6/GMap.NET.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.6/GMap.NET.WindowsForms.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.6/GeoIP.dat
  • XWorm V5.6/Guna.UI2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • XWorm V5.6/IconExtractor.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.6/Icons/icon (1).ico
  • XWorm V5.6/Icons/icon (10).ico
  • XWorm V5.6/Icons/icon (11).ico
  • XWorm V5.6/Icons/icon (12).ico
  • XWorm V5.6/Icons/icon (13).ico
  • XWorm V5.6/Icons/icon (14).ico
  • XWorm V5.6/Icons/icon (15).ico
  • XWorm V5.6/Icons/icon (16).ico
  • XWorm V5.6/Icons/icon (17).ico
  • XWorm V5.6/Icons/icon (2).ico
  • XWorm V5.6/Icons/icon (3).ico
  • XWorm V5.6/Icons/icon (4).ico
  • XWorm V5.6/Icons/icon (5).ico
  • XWorm V5.6/Icons/icon (6).ico
  • XWorm V5.6/Icons/icon (7).ico
  • XWorm V5.6/Icons/icon (8).ico
  • XWorm V5.6/Icons/icon (9).ico
  • XWorm V5.6/Logs/ErrorLogs.txt
  • XWorm V5.6/NAudio.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • XWorm V5.6/Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • XWorm V5.6/Plugins/ActiveWindows.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.6/Plugins/Chat.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.6/Plugins/Chromium.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.6/Plugins/Clipboard.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.6/Plugins/Cmstp-Bypass.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.6/Plugins/FileManager.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.6/Plugins/FilesSearcher.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.6/Plugins/HBrowser.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.6/Plugins/HRDP.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.6/Plugins/HVNC.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.6/Plugins/HVNCMemory.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.6/Plugins/HiddenApps.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.6/Plugins/Informations.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.6/Plugins/Keylogger.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.6/Plugins/Maps.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.6/Plugins/MessageBox.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.6/Plugins/Microphone.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.6/Plugins/Ngrok-Installer.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.6/Plugins/Options.dll
    .dll .ps1 windows:4 windows x86 arch:x86 polyglot

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.6/Plugins/Pastime.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.6/Plugins/Performance.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.6/Plugins/ProcessManager.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.6/Plugins/Programs.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.6/Plugins/Ransomware.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.6/Plugins/Recovery.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.6/Plugins/Regedit.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.6/Plugins/RemoteDesktop.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.6/Plugins/ReverseProxy.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.6/Plugins/RunPE.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.6/Plugins/ServiceManager.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.6/Plugins/Shell.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.6/Plugins/StartupManager.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.6/Plugins/Stealer.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.6/Plugins/TCPConnections.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.6/Plugins/UACBypass.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.6/Plugins/VB.NET Compiler.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.6/Plugins/VoiceChat.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.6/Plugins/WSound.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.6/Plugins/WebCam.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.6/RES/U40957361f7481084776e6aedU9f0U1
  • XWorm V5.6/RES/XWorm.ACT.resources
  • XWorm V5.6/RES/XWorm.About.resources
  • XWorm V5.6/RES/XWorm.Builder.resources
  • XWorm V5.6/RES/XWorm.Chat.resources
  • XWorm V5.6/RES/XWorm.Clipboard.resources
  • XWorm V5.6/RES/XWorm.Clipper.resources
  • XWorm V5.6/RES/XWorm.CustomOpen.resources
  • XWorm V5.6/RES/XWorm.DDosAttack.resources
  • XWorm V5.6/RES/XWorm.EditReg.resources
  • XWorm V5.6/RES/XWorm.FM.resources
  • XWorm V5.6/RES/XWorm.FilesSearcher.resources
  • XWorm V5.6/RES/XWorm.Ftp.resources
  • XWorm V5.6/RES/XWorm.Fun.resources
  • XWorm V5.6/RES/XWorm.HApps.resources
  • XWorm V5.6/RES/XWorm.HBrowser.resources
  • XWorm V5.6/RES/XWorm.HRDP.resources
  • XWorm V5.6/RES/XWorm.HVNC.resources
  • XWorm V5.6/RES/XWorm.Hash.resources
  • XWorm V5.6/RES/XWorm.Hosts.resources
  • XWorm V5.6/RES/XWorm.INFO.resources
  • XWorm V5.6/RES/XWorm.Keylogger.resources
  • XWorm V5.6/RES/XWorm.MBox.resources
  • XWorm V5.6/RES/XWorm.MIC.resources
  • XWorm V5.6/RES/XWorm.Main.resources
  • XWorm V5.6/RES/XWorm.Maps.resources
  • XWorm V5.6/RES/XWorm.Performance.resources
  • XWorm V5.6/RES/XWorm.Port.resources
  • XWorm V5.6/RES/XWorm.ProcessV.resources
  • XWorm V5.6/RES/XWorm.Programs.resources
  • XWorm V5.6/RES/XWorm.Proxy.resources
  • XWorm V5.6/RES/XWorm.Ransomware.resources
  • XWorm V5.6/RES/XWorm.Registry.resources
  • XWorm V5.6/RES/XWorm.RemoteDesktop.resources
  • XWorm V5.6/RES/XWorm.Resources.resources
    .vbs
  • XWorm V5.6/RES/XWorm.RunPE.resources
  • XWorm V5.6/RES/XWorm.ServiceManager.resources
  • XWorm V5.6/RES/XWorm.Shell.resources
  • XWorm V5.6/RES/XWorm.Sound.resources
  • XWorm V5.6/RES/XWorm.StartupManager.resources
  • XWorm V5.6/RES/XWorm.TBotNotify.resources
  • XWorm V5.6/RES/XWorm.TXT.resources
  • XWorm V5.6/RES/XWorm.TcpConnectionForm.resources
  • XWorm V5.6/RES/XWorm.ToolsBox.resources
  • XWorm V5.6/RES/XWorm.VBCode.resources
  • XWorm V5.6/RES/XWorm.VoiceChat.resources
  • XWorm V5.6/RES/XWorm.WebCam.resources
  • XWorm V5.6/RES/XWorm.ngrok.resources
  • XWorm V5.6/SimpleObfuscator.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.6/Sounds/Chat.wav
  • XWorm V5.6/Sounds/Intro.wav
  • XWorm V5.6/XWorm V5.6.exe.config
    .xml
  • XWorm V5.6/Xworm V5.6.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.