Overview

overview

10

Static

static

10

asdwq2r1fg.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    asdwq2r1fg.exe

  • Size

    60KB

  • MD5

    677e13971fe50f6e5e5f1449f5a6d0b7

  • SHA1

    5fa347543973b3f889556846cbb89a86d837a6a6

  • SHA256

    0e80fb8cd24c0a33892f12b8f5f25ebda6238352596f1a59be044aa3520f8b12

  • SHA512

    01465d7290ea20001d9d3d6eb07111dc9bbd5df2db89619a1fb0bf5938cc13ee308d79579698eb80816cbb41934c10c60ce72ab1b2554af2a18eb5ec49c9c8b3

  • SSDEEP

    1536:ymVhCCd3wp5Jiakb16/yYW2v6kCfhOMN8y/C:Fup5Jiakb1fGCfhOMN8y/C

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

funut-47702.portmap.io:47702

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • asdwq2r1fg.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections