Overview

overview

10

Static

static

10

NEAS.8609e...e0.exe

windows7-x64

10

NEAS.8609e...e0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.8609efdaaa4533858308f00ed3d5eae0.exe

  • Size

    46KB

  • MD5

    8609efdaaa4533858308f00ed3d5eae0

  • SHA1

    97d737c4b0001abc0242d8356264e6d77946d137

  • SHA256

    7b075a66281c5045e29ff064664236dd50a1fb9f76f927dbde146009be950916

  • SHA512

    f0be7eda0c84aa29883e51b7235fae6419d9dec4f029d25e43bde754694821e71c5f49d05bf2c6bfd8632e1121e7ad05888b8d4115374e71b0a90bede8e395a6

  • SSDEEP

    768:d0Tx/F293OuI4PyYHKKE0ou6s5f9kO7MEoX3IiCtTEq9bxnKmpT26RhOOSn1AXSp:dP93Ou7HKKrxD5f9f7MEAIiCF9bxKX60

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

3.1

C2

127.0.0.1:7000

Mutex

BUvmKCgmd24yHWeB

Attributes
  • Install_directory

    %AppData%

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.8609efdaaa4533858308f00ed3d5eae0.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections