Overview

overview

10

Static

static

10

ee7dd18f59...7b.exe

windows7-x64

10

ee7dd18f59...7b.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ee7dd18f59e73fc4569a7a2564d52d6ee55b19757f89f57b17e35f32eb88327b.exe.zip

  • Size

    32KB

  • MD5

    eb25175e7cb0cc85566d0104472c68c1

  • SHA1

    d5c9c34b8d71ca3cd49d3eefee19b6c12e688804

  • SHA256

    4365613dfb3ca0d72a555148edade98bc469ad480ae1a42017a58e88a338efed

  • SHA512

    75915768f4154335812c0ca244438464688705fded859dbcdc6827588f102d66b46fa00bf14f148c81c037b0b9ccdcad733b276ae99ca8534fcf943de2c63d18

  • SSDEEP

    768:Z2tCWy+PakBJ1kCYA5/LFzBiyb4NEP6cyCf1fhI+6Pc3enHTn3:Z27qkBJ1kCYOFotS6zCF+VPNHb3

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

needforrat.hopto.org:7000

Mutex

4DmqnprMzJEWl3vs

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ee7dd18f59e73fc4569a7a2564d52d6ee55b19757f89f57b17e35f32eb88327b.exe.zip
    .zip

    Password: infected

  • ee7dd18f59e73fc4569a7a2564d52d6ee55b19757f89f57b17e35f32eb88327b.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections