Overview

overview

10

Static

static

10

1720-0-0x0...ry.exe

windows7-x64

1720-0-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1720-0-0x00000000000E0000-0x00000000000F2000-memory.dmp

  • Size

    72KB

  • MD5

    e3cfa4c281b3b4505261a44d94c41b4c

  • SHA1

    8fbfd15a7ab9ad43c3ed5fbcb3dc6313f4fee0c2

  • SHA256

    9a68cafe729fd1864190aafe5bbd40be7cb3475547ef4465bd2416eea155bee7

  • SHA512

    ab9f9130f9a397d19ac279e3e1f1ae14a4f7f50fc059fba2002e28d527d3e9c0a5179aac100ae3e926f8d4f96b296a97a5a495abe1d55526ebedfc37c826dadf

  • SSDEEP

    768:jTS3o3gSSxgD4HtQuOS13BFbqJRHg8phTEjGhnOUIp:8mdSxg4Huup1CJtxhTzBOUK

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

2.2

C2

147.185.221.17:18356

Mutex

TgmA9Cww4RXPIljA

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1720-0-0x00000000000E0000-0x00000000000F2000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections