Overview

overview

10

Static

static

10

jusched.exe

windows7-x64

10

jusched.exe

windows10-2004-x64

10

Resubmissions

03/06/2023, 17:23

230603-vyj5lshd68 10

03/06/2023, 17:19

230603-vv9wvshg9z 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    jusched.exe

  • Size

    72KB

  • MD5

    fc60668008649092243b5f1b4b3d7749

  • SHA1

    f5fb8f2394da2039832d0d3903e77685cc83cc6d

  • SHA256

    2b5301f169cc40ebd3502b4037b9d0746c04bdee779921b4f8350b88a046b0fe

  • SHA512

    0380a7bb3bc2179b22d30505365c09792cfec4685ddba1eb0a4cd3acff0868b6e67c4d21012bbdfeff8fffff3271af859511fb705e0a1220af492dea75540e84

  • SSDEEP

    1536:/y+vB2Xc1zoEj2bJhHCnbRxJTpLOeCJw1shBVK6EjjO6zV7CgNwinMx:/yCETG2bJhHCnbRxyeL9jOmV7CgDMx

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

209.25.141.181:28050

Attributes
  • install_file

    MsMpCmd.exe

Signatures

  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • jusched.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections