Overview

overview

10

Static

static

10

68850.exe

windows7-x64

10

68850.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    68850.exe

  • Size

    208KB

  • MD5

    7e2be4ac04d8f56473499eac3a10fb34

  • SHA1

    6b66e9aa00599415a1c52bee0c723d0728e50900

  • SHA256

    ec6a6aa9a75e81c6069edc6bd5e246062ae923348d7c2221eb5f8fa3f59b63a8

  • SHA512

    3ec7f182965a82c61d7af2e5579940ec0a47a49c233f493210ca5bf700d43e3d0880418a093c5939ec89b0bd076aaa00ba798c07d5fc08d55ba7704339ba8e0e

  • SSDEEP

    3072:GxMFw9diyOCJ/8SKfbzxcwg7es6/Vsb8VKTup49oJMfF/H9N3Ky9NzLny:Gx2w9ouUhcX7elbKTuq9bfF/H9d9n

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

6.tcp.eu.ngrok.io:18052

Mutex

hMwsB2Kl8eJNYZZz

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 68850.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections