Overview

overview

10

Static

static

10

savebuild.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    savebuild.exe

  • Size

    41KB

  • MD5

    b8e191f001b8669d8b78430706f39048

  • SHA1

    63835e82beb3cedf4a3579fb3d2ecc91fa48c428

  • SHA256

    f557a01ff11b40ea19d2506f51466f12790658233b062f1498a5116ad9e58668

  • SHA512

    7ac7041cff31b768391ac2f41104697be63395eaa85691ad8df7c6ba9c6b66fcac9ecb09e41396a46b9e4df80ad86a041127bf4619c5acc9cbd1b05ba1f5ae59

  • SSDEEP

    768:Wd4LOwcmOsGmqCAr43MpfJF5Pa9p+uM6iOwhQ3/ubC:WkHcmOFtRrtRF49IuM6iOwiGu

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

127.0.0.1:13073

homepage-thai.gl.at.ply.gg:13073
Mutex

uV7YEDtG20GuoQqO

Attributes
  • Install_directory

    %AppData%

  • install_file

    $77.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • savebuild.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections