Overview

overview

10

Static

static

10

EFI.exe

windows10-1703-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    EFI.exe

  • Size

    39KB

  • MD5

    096d29e7a78d9037951ff1281b86d91b

  • SHA1

    0e469bd3a97861a4e148967bbcb485d815f67be1

  • SHA256

    d6718585024f4c684cc4cbdf62a4f00ce0d8be55903720fa24787a0bdc1a7ef2

  • SHA512

    c514e69735497440b8e017e83b671fea26b9a3ffdce18126b32e9199f964b991ab8d899fbf3e7ecffb26166d12d65242a2a63eada990298946950b68db60cec9

  • SSDEEP

    768:ftiZ6JV2fbkLRFVYOoC6JNVCOurlSOzFP+91U6r3O9hCaEv:ftiZgVobgYW6dyPFG91UQ3O9k

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

127.0.0.1:6000

73.33.151.14:6000
Mutex

vCFmyHNTXmzf9D2e

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • EFI.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections