Overview

overview

10

Static

static

10

5b6b5afedc...5f.exe

windows7-x64

10

5b6b5afedc...5f.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5b6b5afedcc2e333fd8f4746d6c38651c4ebbecdc081326acb6d5fc55521175f

  • Size

    41KB

  • MD5

    b019e59ade0874a22780bcdc9a797c7f

  • SHA1

    03f4e9c78cdbdee9ea380e207d54010ac89f2d9c

  • SHA256

    5b6b5afedcc2e333fd8f4746d6c38651c4ebbecdc081326acb6d5fc55521175f

  • SHA512

    2635424c470587b2dd60daca265b369d8fc87273d50c5a661c355d92d6b4c37722501f4351b4c65ed0da3e3ba5fbd77a709d9f49bb6f87299b30193512c53698

  • SSDEEP

    768:gdGaYEPK+/Lw9ytlnhSUk9lYAT9EKdQ9jG0ayRxTZ:gdjXBDw9yRSbYKbQ9ygXTZ

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

163.5.233.22:7000

Mutex

kGMkITeiWnZq4Z0G

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5b6b5afedcc2e333fd8f4746d6c38651c4ebbecdc081326acb6d5fc55521175f
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections