Overview

overview

10

Static

static

10

2358c0ec98...01.exe

windows7-x64

10

2358c0ec98...01.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    32d01acb361dc067963414f7159e15b64a20e1d85c428c864fe164ab01150c93

  • Size

    16KB

  • MD5

    7e96968a55064650e0ccc8be0d13ace1

  • SHA1

    3ff888eac635c61c63845b559fc94ea83929d98c

  • SHA256

    32d01acb361dc067963414f7159e15b64a20e1d85c428c864fe164ab01150c93

  • SHA512

    371f7d1787f1561bb89d0ccbffad91cc60bf7940918873e504a543aa495dbf4a31f4ba1db747996afbc193e3abb50a042b01f530b50ed26cf25d6782a8cd20b8

  • SSDEEP

    384:CfktafgT6VtdsX/f2xw32OBeU+XxRT/xyuGHXBsj:ckOguVMP++cUuzxzcXBw

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

serverupdated.duckdns.org:7000

Mutex

yrQY1I570K1y5FiJ

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 32d01acb361dc067963414f7159e15b64a20e1d85c428c864fe164ab01150c93
    .zip

    Password: infected

  • 2358c0ec98db0b54700a61647dce2769687074ae7cc82dee6472ad41a801ec01.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections