Overview

overview

10

Static

static

10

Xworm5.4_rar.exe

windows7-x64

10

Xworm5.4_rar.exe

windows10-2004-x64

10

Xworm5.4_rar.exe

macos-10.15-amd64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Xworm5.4_rar.exe

  • Size

    79KB

  • MD5

    21b50d1deafc8a40e5dd767a91c67f83

  • SHA1

    f598ccda048c05afc16b70dd16be3bd0f1326e8d

  • SHA256

    c78eb4a370c5a7ad6d1d0dc50a3a64d728cf3b080ace43d3c6e80f3a20823f0a

  • SHA512

    5db0ef98e6039b36e1216dbb20193e852146934dae01c2c4442a761fa1d31365c53f2f6fb950730a535975aa86d2c634e26900ee6b46ad4e182222c3a055ba85

  • SSDEEP

    1536:3ogpYw43GKut7PFr1iAi65tbRRQJ4jt6ctUP0O/wYnK57476Gc:0wegt7BoiLbRRtjzUP0O/nnK5kWGc

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

0.tcp.ap.ngrok.io:18066

Attributes
  • Install_directory

    %ProgramData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Xworm5.4_rar.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections