Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Fixer.bat.exe

  • Size

    54KB

  • MD5

    ba3a47f83a30bf2b0de4517ac91ad23e

  • SHA1

    e2deab499b4eb81bc72d35c2dcf69af8085ed830

  • SHA256

    6bf25c68fb1114f57bfc4bd970994d49f2bcd65e1bcdfd63fa471fd4a620b8d9

  • SHA512

    e09b4c16388ec909c28ede208a83401433f9868bdd9240dec8992d55dc0e0ca9d0b9f98d8a7ae50dcf6745028b0053f01a18d1e47fdeb2993a78ec91837fb84e

  • SSDEEP

    1536:NsbDoEP0Z1sS95/ZBzMoqbfm3tpAAOJBf6CF:NsbDhk5/ZBz/qbfBAOJBf68

Score
10/10

Malware Config

Extracted

Family

xworm

C2

23.84.85.170:1738

Attributes
  • Install_directory

    %Userprofile%

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Fixer.bat.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections