XZD[.]exe | Triage

Submit
Reports

Overview

overview

Static

static

1

XZD.exe

windows7-x64

XZD.exe

windows10-2004-x64

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

XZD.exe

Resource

win7-20230220-en

remcos awele-host persistence rat

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

XZD.exe

Resource

win10v2004-20230220-en

remcos awele-host persistence rat

windows10-2004-x64

9 signatures

150 seconds

General

Target

XZD.exe
Size

956KB
MD5

332638c6639e013b5bba729b78b9c234
SHA1

31b7ad142dfef57d6f8becc4b7b6528c67617827
SHA256

683843fe257ddca12e864696830448bc04e7eeb9ab53e42dc185d898462c85fa
SHA512

55f9d2def37094bdeb7ca0d59f2869a0ce44725fbddf35e891a466ff0b2cdbb7396a0e60112a9e2b3c88cfd2c15904b2425c43c526fee64de1fc1b6e45b24cf0
SSDEEP

24576:isXMIyXL8g2DGwmie5K7lvHLZtVmeTk/u+UqCoKfD+eJKV6Z:Lmd2DG/15KxvzTh+UqRKr0V

Score

1^/10

Malware Config

Signatures

Files

XZD.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 946KB - Virtual size: 945KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

© 2018-2024

Terms | Privacy