General

  • Target

    172000x00000000000E00000x00000000000F2000memorydmp.exe

  • Size

    72KB

  • MD5

    e3cfa4c281b3b4505261a44d94c41b4c

  • SHA1

    8fbfd15a7ab9ad43c3ed5fbcb3dc6313f4fee0c2

  • SHA256

    9a68cafe729fd1864190aafe5bbd40be7cb3475547ef4465bd2416eea155bee7

  • SHA512

    ab9f9130f9a397d19ac279e3e1f1ae14a4f7f50fc059fba2002e28d527d3e9c0a5179aac100ae3e926f8d4f96b296a97a5a495abe1d55526ebedfc37c826dadf

  • SSDEEP

    768:jTS3o3gSSxgD4HtQuOS13BFbqJRHg8phTEjGhnOUIp:8mdSxg4Huup1CJtxhTzBOUK

Score
10/10

Malware Config

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 172000x00000000000E00000x00000000000F2000memorydmp.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections