Overview

overview

10

Static

static

10

XTest.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XTest.exe

  • Size

    72KB

  • MD5

    fe9f9aaff0860bc84d4158b77c85368b

  • SHA1

    e98dfb4962032550146bd673c3b82047c3d10b4d

  • SHA256

    6af3f0518a5bd4f66b5d4780482cf4dcfcbb2dcffc0fe8cb848d4bf12c635fad

  • SHA512

    339cf0f2287644441da77434aa01a9497f0edeff5a208e2c99b176eca6370b629095803d8e35e26275a225095115700bae9fb1ca84f71fcad84aa32806628a6c

  • SSDEEP

    1536:ToYMbc7+FtNw2yPEyHeJRWbuFLICKsJbu09cm4CBH7upAPOQJOfK:TAnNwdLeIu1KsJbu0G4HCpAPOQJSK

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:7000

78.138.35.219:7000
Attributes
  • Install_directory

    %Userprofile%

  • install_file

    Fortnite.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XTest.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections