Overview

overview

10

Static

static

10

fe8b320087...11.exe

windows7-x64

10

fe8b320087...11.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e46d80f1b4a81c1aaafdda010b0db0eca9c0957a1a3990671d583247d33371ff

  • Size

    16KB

  • MD5

    c3820a85f18413b82d3f0fa5992d2d5b

  • SHA1

    f2c0d39519bc1c5396476b76d4e7b23f5476253f

  • SHA256

    e46d80f1b4a81c1aaafdda010b0db0eca9c0957a1a3990671d583247d33371ff

  • SHA512

    d1843399af8cf8e08d644eee8f7bd36ec9fe5449f234e619b9d1529c282bfaccaac3b4808f12f7b34d00b937b174c480a6e73af0331261f3848e40eceaeb3626

  • SSDEEP

    384:TX5o2P4X1U8FMePOr+VZGVubTEQ7gvEwGDJ/1jrTZu5:TX5nWXRAIUOTEDvEZhtx2

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

3.1

C2

dzn.ddns.net:5552

Mutex

mT1l25650AkcpwGy

Attributes
  • Install_directory

    %Temp%

  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e46d80f1b4a81c1aaafdda010b0db0eca9c0957a1a3990671d583247d33371ff
    .zip

    Password: infected

  • fe8b320087553eaee75439ab0c4c523a67687c5cb70763bcf042bcfabb205f11.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections