Overview

overview

10

Static

static

10

2724-54-0x...ry.exe

windows7-x64

2724-54-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2724-54-0x0000000000090000-0x000000000009E000-memory.dmp

  • Size

    56KB

  • MD5

    9c124df4c253eecc0c2de5236f3cf8b2

  • SHA1

    e44ed241b1a131603e11835669e0b17a4e6ef7a6

  • SHA256

    d1b595ce5a4004135c64b50220466a5840e5877081f7fdf611d310c4ca8cb109

  • SHA512

    c12f2ce93c41040d1489bb17f8a7394efa212d375b0bf9111d7d4e53ffe9b0bc4dde434d61d64d334c60d738cc037f00f23925c8488e371706b0843f08468641

  • SSDEEP

    1536:8DGkptwyZScCkU4rAUsZcB5xCuF59CpO9J:GkUs6VF59CpO9

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

brasil.ddns.com.br:7000

Mutex

qQwviEtWYn4ErXAa

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2724-54-0x0000000000090000-0x000000000009E000-memory.dmp
    .exe windows x86


    Headers

    Sections