Overview

overview

10

Static

static

10

AAAS.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    AAAS.exe

  • Size

    64KB

  • MD5

    ce4be631dbd02518bd2b2a8d9b2ec9d3

  • SHA1

    bdee45ed8a54ef6999890e695bbbdc9361b049f4

  • SHA256

    d475d256128376dfea38891c41f6b8209c8f7d759fe1358f0043fefe7d7e1ba0

  • SHA512

    071e824c0c2cdabcb88fc2872206a13d44ddacebc6f1ae0e5d2f96602f436aaf4af75898dce14a3d32ef6f1e01ca42b6d0cc3d36ca4c1e33a98a27aa57488087

  • SSDEEP

    1536:jvRAVaHp3sT+hhCJ7/w96+bpxjpzWbJ26hOHoqZI+:T2VocT+Ej+bbj9W15OHB

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:1441

147.185.221.16:1441

89.134.3.9:1441
Attributes
  • Install_directory

    %Userprofile%

  • install_file

    WinService.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • AAAS.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections