Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

Credential...on.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Credential Guard & VBS Key Isolation.exe

  • Size

    55KB

  • MD5

    dac20ddb2cfb3cb89ce5bcd907c796df

  • SHA1

    84ec40d9a683ed62a25f8e1e570b0a2ee3987af0

  • SHA256

    9a727d5cfc4c67cb0d3c0f8195087042fd04b83bb29cbe0c0439a4094a2adfc7

  • SHA512

    5a3199f76bc18eb20a1e9e7d0bdbadbff3deaa06ec00b3aee33360f1497cc22ae0bc1a125aeaadcef1647c5f03cb386bfbc62375ca5e70ac57c01168043c8762

  • SSDEEP

    768:iPZlFQ+v3HM88U6lB5hNfLShjqmEsbYt+UcYzF6t/X62GJhJOZouejI:iPK+vMhHatbYZJzG/gbOGu7

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Attributes
  • Install_directory

    %port%

  • install_file

    svchost.exe

  • pastebin_url

    https://pastebin.com/raw/J42c6s7r

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Credential Guard & VBS Key Isolation.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections