Overview

overview

10

Static

static

10

acdfw.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    acdfw.exe

  • Size

    51KB

  • MD5

    3092ff1ce473e2795dc277a272b45670

  • SHA1

    a16fa1ca7b1aeca4119c0ab9e47af95a837c90db

  • SHA256

    3210b727d42b3f633e38a0d130a71d4fa02f4b790d2af1440f96b73d963b33ad

  • SHA512

    fe34e502e9eccd63b1eb6a5250dc5431d8ffdac5481312744d3f9da2e26827f4670e69d240f368c181352c8c46ab538036350c67d6df837f1824964c57a91e68

  • SSDEEP

    1536:kJHZ+PSTTBSvWx04tDkb5+PJcfg6XOoj8:QZTSve04tDkb5iOOoj8

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

funut-47702.portmap.io:47702

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • acdfw.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections