Overview

overview

10

Static

static

10

ok.exe

windows7-x64

10

ok.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ok.exe

  • Size

    176KB

  • MD5

    2f15cf01e065c62d0e8d461649e1a94e

  • SHA1

    95c3c01a2b27d3b31d1531cde144b55b13d2b528

  • SHA256

    da1dfa8a65de9e7112de9f0eb45b6bbf6b644b9adc007b9edc8f75d79c3652a8

  • SHA512

    a6e88d512734a2b9c0b94394f85d58d88c4f2dc4a599363e212395e4211ec5e3d2e3a0dde3472eed8d9de1b70bd678201d104e899aab11324b0f5eecca331f01

  • SSDEEP

    3072:vPiJDsVhba5aw1MZOQeNM+lmsolAIrRuw+mqv9j1MWLQH:34Dkhb0/Gqm+lDAA

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

ezhack-60175.portmap.io:29294

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ok.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections