Overview

overview

10

Static

static

10

DOTNET.exe

windows7-x64

10

DOTNET.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    DOTNET.exe

  • Size

    64KB

  • MD5

    d0723b6dc254501642db3607963a099c

  • SHA1

    dd45ac8f16028770edaf93a3f84a90ff9d29ff65

  • SHA256

    d54acc32db5c2b13907576ba94065b387ba153cb1c8ba9ac1d7ebc715e5a17cc

  • SHA512

    0b64d092061d7d0433039347c4f8d197a9a86c0afae0b9ce4746a48c83e4935afee5fe4c2175003d9a0e663f11ea4f9d7e8ac98613c4519931002638c840c694

  • SSDEEP

    1536:x1DA1txkbmOieEabpPWNKb9OZS5GuDLmEOmtWGO/hsQoPyi6:PMx0mOJcNKb9nDFOQdOJsDai6

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

86.173.127.81:7000:7000

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • DOTNET.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections