Overview

overview

10

Static

static

10

35e60299b3...57.exe

windows7-x64

10

35e60299b3...57.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d035d425fda5b3dae52d6590a5da1f0f3ef246ad4b9adea49ee863b35e79ab79

  • Size

    18KB

  • MD5

    ef6d3ee353ab4b56f5bdee44cf907373

  • SHA1

    e22190229f33678833556b62a2984a4271630256

  • SHA256

    d035d425fda5b3dae52d6590a5da1f0f3ef246ad4b9adea49ee863b35e79ab79

  • SHA512

    11d37a916d9b724a056958e2543bceeb0b3911883fdad9da5ab839a052cbaa716f4e1a24124c4f603a6dde6f41f9b88b5a02a242d0df21f1c5e2ce9f726e6026

  • SSDEEP

    384:WShfcpdDOLNx29D29lljbWE6+nXmvb0hbywvMBbqEGGioUWUIPSkTRf:W8yJ96SE+vQVy5bqEjhUaSkTJ

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

3.1

C2

football-hockey.gl.at.ply.gg:16652

Mutex

jxYOCCPHpHENcLgZ

Attributes
  • Install_directory

    %Temp%

  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d035d425fda5b3dae52d6590a5da1f0f3ef246ad4b9adea49ee863b35e79ab79
    .zip

    Password: infected

  • 35e60299b34c4398aca3c27d87535cc3211bf065b93d18f94ce61e1b2d85ba57.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections