Overview

overview

10

Static

static

10

c382a9b8a9...8f.exe

windows7-x64

10

c382a9b8a9...8f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c382a9b8a942145bb9cc963c5c1ab8fd53161fb9ac543e25477d41092acb668f.exe

  • Size

    4.2MB

  • MD5

    a24a8287aafe88f86ee58bde969db33c

  • SHA1

    36ef8fac732c5208fe6e5b2fb767ac1dcc836eb7

  • SHA256

    c382a9b8a942145bb9cc963c5c1ab8fd53161fb9ac543e25477d41092acb668f

  • SHA512

    af0a085ff94faeabdb82b1011f13998daac68615b425528d9dab1d909a1302c01518060e24f27af9dcf0f1b9bcf60cecee71e3f8bc0980d6adc69ff28a8ce802

  • SSDEEP

    98304:yQnUGAC+hqc8lqvdzw2nsNKYYURyc9JirsN4JzmUP:y+Tn2qcUzp6UYeJRCxP

Score
10/10
xworm

Malware Config

Signatures

  • Detect Xworm Payload 1 IoCs
  • Detects Windows executables referencing non-Windows User-Agents 1 IoCs
  • Detects executables packed with Themida 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c382a9b8a942145bb9cc963c5c1ab8fd53161fb9ac543e25477d41092acb668f.exe
    .exe windows:5 windows x86 arch:x86

    9222d372923baed7aa9dfa28449a94ea


    Headers

    Imports

    Sections