Overview

overview

10

Static

static

10

real.exe

windows7-x64

10

real.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    real.exe

  • Size

    177KB

  • MD5

    0bebcc64ad6ab3aed9b2a5b783db1b7a

  • SHA1

    2c4f870a2c89299b638668e868fc1ece233df2df

  • SHA256

    a7903a792f681e00d5c41c11bcb041227a13f16f4f1f5fde1bdb1722c2f7085b

  • SHA512

    6fb4dafe91444d348afe91eb360bd18abc745268974864ca8e99f4d64f7a5ed4eced40ec2462b9347092916ed914f0bc82a7462f436c3c0bc572d5669d82f17b

  • SSDEEP

    3072:ksYkcYIUQObxophkyWOVotM+lmsolAIrRuw+mqv9j1MWLQh:nVIabOLyG+lDAA

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

uk2.localto.net:32941:443

Attributes
  • Install_directory

    %ProgramData%

  • install_file

    svchost.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • real.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections