Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

New folder...ox.dll

windows7-x64

1

New folder...ox.dll

windows10-2004-x64

1

New folder/Fixer.bat

windows7-x64

1

New folder/Fixer.bat

windows10-2004-x64

1

New folder...re.dll

windows7-x64

1

New folder...re.dll

windows10-2004-x64

1

New folder...ms.dll

windows7-x64

1

New folder...ms.dll

windows10-2004-x64

1

New folder...or.dll

windows7-x64

1

New folder...or.dll

windows10-2004-x64

1

New folder/NAudio.dll

windows7-x64

1

New folder/NAudio.dll

windows10-2004-x64

1

New folder...ws.dll

windows7-x64

1

New folder...ws.dll

windows10-2004-x64

1

New folder...ne.dll

windows7-x64

1

New folder...ne.dll

windows10-2004-x64

1

New folder...at.dll

windows7-x64

1

New folder...at.dll

windows10-2004-x64

1

New folder...rd.dll

windows7-x64

1

New folder...rd.dll

windows10-2004-x64

1

New folder...er.dll

windows7-x64

1

New folder...er.dll

windows10-2004-x64

1

New folder...er.dll

windows7-x64

1

New folder...er.dll

windows10-2004-x64

1

New folder...DP.dll

windows7-x64

1

New folder...DP.dll

windows10-2004-x64

1

New folder...NC.dll

windows7-x64

1

New folder...NC.dll

windows10-2004-x64

1

New folder...ns.dll

windows7-x64

1

New folder...ns.dll

windows10-2004-x64

1

New folder...er.dll

windows7-x64

1

New folder...er.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Newfolder.rar

  • Size

    46.9MB

  • MD5

    b5e8be6130a74993d74c5544854e28e5

  • SHA1

    fd3658985744f044429956d6e7a4bb31170945d2

  • SHA256

    8226e9367565a7455d21a1ae8249766acb49949e5353abe3009a68b62cdc504c

  • SHA512

    c972567539ef61b0674b85b59220965a4d615b553499e409a55a0e8ef30418cb10f2187e4e525e6267afadc0bee6d79ffb4dd277dbd05be441561c2a5ab8ad5d

  • SSDEEP

    786432:xs35cJJfXpamVV8f/IDrIKKBfUTbBB7MoiWq0UuX24lrEJ6OqnchsW7DkseJAQ0P:O35cPfpamVJxEUTbf7Mo+7uXBG6Oqncx

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

3.0

C2

147.185.221.26:3333

Mutex

x5HokpexeOtoNIFY

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

aes.plain

Signatures

  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 38 IoCs

    Checks for missing Authenticode signature.

Files

  • Newfolder.rar
    .rar
  • New folder/Background.png
    .png
  • New folder/FastColoredTextBox.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Fixer.bat
  • New folder/GMap.NET.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/GMap.NET.WindowsForms.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/GeoIP.dat
  • New folder/IconExtractor.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Icons/icon (1).ico
  • New folder/Icons/icon (10).ico
  • New folder/Icons/icon (11).ico
  • New folder/Icons/icon (12).ico
  • New folder/Icons/icon (13).ico
  • New folder/Icons/icon (14).ico
  • New folder/Icons/icon (15).ico
  • New folder/Icons/icon (16).ico
  • New folder/Icons/icon (17).ico
  • New folder/Icons/icon (2).ico
  • New folder/Icons/icon (3).ico
  • New folder/Icons/icon (4).ico
  • New folder/Icons/icon (5).ico
  • New folder/Icons/icon (6).ico
  • New folder/Icons/icon (7).ico
  • New folder/Icons/icon (8).ico
  • New folder/Icons/icon (9).ico
  • New folder/Intro.wav
  • New folder/NAudio.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • New folder/Plugins/ActiveWindows.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Plugins/All-In-One.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Plugins/Chat.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Plugins/Clipboard.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Plugins/FileManager.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Plugins/FileSeacher.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Plugins/HRDP.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Plugins/HVNC.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Plugins/Informations.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Plugins/Keylogger.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Plugins/Maps.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Plugins/Microphone.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Plugins/Ngrok-Disk.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Plugins/Options.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Plugins/Pastime.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Plugins/Performance.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Plugins/ProcessManager.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Plugins/Programs.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Plugins/Ransomware.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Plugins/Recovery.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Plugins/Regedit.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Plugins/RemoteDesktop.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Plugins/ReverseProxy.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Plugins/RunPE.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Plugins/Shell.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Plugins/StartupManager.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Plugins/TCPConnections.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Plugins/UACBypass.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Plugins/VB.NET Compiler.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Plugins/WSound.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Plugins/WebCam.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/Runtime Broker.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • New folder/SimpleObfuscator.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • New folder/XWorm V3.0.7z
    .7z
  • New folder/XWorm V3.0.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • New folder/XWorm V3.0.exe.config
    .xml