Overview

overview

10

Static

static

10

0b8b21af69...89.exe

windows7-x64

10

0b8b21af69...89.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0b8b21af69d0b465b7b8cd584bdba1f86d062bb0c7c51656f36a66fce8e9bd89.exe

  • Size

    66KB

  • MD5

    00135a86ab829fc2d4678179d7a6e70f

  • SHA1

    ef75c259865d7685d566b6e25b7a20d134952555

  • SHA256

    0b8b21af69d0b465b7b8cd584bdba1f86d062bb0c7c51656f36a66fce8e9bd89

  • SHA512

    011389f2bc93f45b36233238a32991823c3334e3259af98e7dd6cedb455fc930d5b603f51bb69e415ab24f285309eda0b272250f1ec82a21508de0681281a0ef

  • SSDEEP

    1536:TjDQ1biZlWCiOmaB6dGXtK8qw2u04+bFoJZ+Pl+aaPOVde0:TQ1alRYQtKw504+bFxPFaPOVdD

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

94.156.8.213:58002

Attributes
  • Install_directory

    %Public%

  • install_file

    svchost.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Detects Windows executables referencing non-Windows User-Agents 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0b8b21af69d0b465b7b8cd584bdba1f86d062bb0c7c51656f36a66fce8e9bd89.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections