Overview

overview

10

Static

static

10

4c80886612...3d.exe

windows7-x64

10

4c80886612...3d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b25585ff65dc06a05a82635f8162c592cf35cc789e7a4c805c0c5dd348797b49

  • Size

    16KB

  • MD5

    9767212506f9fa1c194b40e7d46bc590

  • SHA1

    1f51f5a9886ff3cfde0a3e375a601be03b0cdb5a

  • SHA256

    b25585ff65dc06a05a82635f8162c592cf35cc789e7a4c805c0c5dd348797b49

  • SHA512

    ea163a7ed1c77c6ce1ee6cb0a83c1bdc90a34b5fe4b865cfa0ccbe227b9eb2084c2b5bd698161d5b32b84996c1a4f51ebbf4392629451b3a84813d861dbe6782

  • SSDEEP

    384:gJqZfIzrXo9+4hvTPh6Db83QZ7f+ufDB4QEgr:gEZf4rrst3Nuft

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

45.138.16.125:7000

Mutex

i6tci9ARV52IqCB2

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b25585ff65dc06a05a82635f8162c592cf35cc789e7a4c805c0c5dd348797b49
    .zip

    Password: infected

  • 4c8088661259a41032568d840aaa591aff00751c6b4fff74b0aa4751e7ab0b3d.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections