Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

ValoMadeByvenus.exe

windows7-x64

10

ValoMadeByvenus.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ValoMadeByvenus.exe

  • Size

    76KB

  • MD5

    ad18b27209befbbc41ad92f06cc9457d

  • SHA1

    2326a907c614026e77551a95d6552a2e5c4e57d8

  • SHA256

    e2d0984ee4304bc13624d0260a15c465d7ecaf909452acfdd7221e72e776369a

  • SHA512

    cc82c24a841c7bda3776d7c3df2addc415b72b078837b3754642d072e64ff53365ec07d0dd2c6ca9f778f817f081dac82116bd8568c023b746a492e171a4cebd

  • SSDEEP

    1536:/rxA5fxEsD6yB/QAIuooqPP/baX3URnwB/fjCPB5weO1OFdkLlc/:zxAtxE5yVQru9c/bW3Qq/fjkB5fO1OFr

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

paypal-themselves.gl.at.ply.gg:34855

Attributes
  • Install_directory

    %Userprofile%

  • install_file

    winaudiog.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ValoMadeByvenus.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections