Overview

overview

10

Static

static

10

bTKp.dll

windows7-x64

1

bTKp.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bTKp.exe

  • Size

    32KB

  • MD5

    32801003b083fdef3d5b8db125da5601

  • SHA1

    aacf7d24835f6daaf1d30e0e9a984f3f126082ad

  • SHA256

    3313a1b94dc054adbeb337332d60a54dbd9267216dffc2952a39c1cada45671c

  • SHA512

    6d59fb9dd8980154bccb71c35948282d6f3e3a681718ecf778eb531f640899f25e432d6e98896ac6ea5328ed6d4c55dcfdcd3091b604e8bf233674aab94b8fe7

  • SSDEEP

    768:F3vKeuPrr2BnDaXLnRYHtFmHXCW5duyf9bUt6cKhnmOVYvvGKG:F/KeuPrrAD8RYHtFmHrNf9bUtYJmOV8I

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

3.0

C2

nodetect.duckdns.org:5553

Mutex

SSHZOQ2rU0EGiW4u

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bTKp.exe
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections