Overview

overview

10

Static

static

10

cum.exe

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    cum.exe

  • Size

    316KB

  • MD5

    b8657248ae13e65787378434720ef1af

  • SHA1

    fc87d63493dd228739efc4f8bbfd6a65f37b22e1

  • SHA256

    c2f1c72c151fbff6ada93a2f04275718d96853f2e4c46c8ac4d6ebf160da2cf0

  • SHA512

    d8b943b34665436958589c84ee5d5577b9df5c5289441da23b3909ba74edb98f8c0e45c264a41541fa5e2352d69242de28b44dfa442fc68a7a7df0d7d38c6762

  • SSDEEP

    3072:4MkbmAaqOa7JkAZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ+ZZZZZZZZZZZZZZj:4/bBq+GIIIIIIIhIIIIIIIIIIIIIIIU

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

funut-57112.portmap.io:57112

Attributes
  • Install_directory

    %Userprofile%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cum.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections