Overview

overview

10

Static

static

10

payload_de...ed.exe

windows7-x64

10

payload_de...ed.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    payload_decrypted_decompressed.exe

  • Size

    75KB

  • MD5

    3de04cf3ce246c720f473e72a15db602

  • SHA1

    fcc658446bff0c0ae233312c8a4e5d27d6fdd40e

  • SHA256

    5303b9bf032715221bd01d3c22fc7e3503865f6cf75045066d9499258f965217

  • SHA512

    6a28a958182e280b7770476265c5bda7a4925b2a6bda0fc51c1729a2395627f20097ef1d7b595ea0de6c88f50955efa746adde8f91a0713dd94465a6885853c6

  • SSDEEP

    1536:fb8gDcNQHrwsKfFeqTvgsm3VW/QQeaNWU1b9n2RefakLOyImhR4DkRG:fbbFsdJToH3VW0akEb92RefRLOyI0nG

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

147.185.221.18:28789

Attributes
  • Install_directory

    %ProgramData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • payload_decrypted_decompressed.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections