Overview

overview

10

Static

static

10

Usermode F...st.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Usermode Font Driver Host.exe

  • Size

    43KB

  • MD5

    ea07d8305c056c7e0d4f04ca308c3e7e

  • SHA1

    276833cd746131a90988d96b30d878b4b28f6357

  • SHA256

    0111c30bbd287cece2f8f1ea8b2bccb4baa7f61d36e1bd60954b29b9828b7e53

  • SHA512

    11855d32e6dfe113abaad229b0bdb9b3ccfc0a4747e5ac60a302de29ede9d250f1630f1ea7d34eaada49996ca4e4e36bffffc1ae3f328dc26727f7da5b09655f

  • SSDEEP

    768:/kFor0X7aWWtFivyl0jp38vCONMJFRPM9Xt7OCh9vupw/:/1r0X7aWuGUIF69d7OCHWpk

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

fee-harmful.gl.at.ply.gg:41934

Mutex

vVbrle7pdpkSp2Hp

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Usermode Font Driver Host.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections