Overview

overview

10

Static

static

10

60bb0aae72...bb.exe

windows7-x64

10

60bb0aae72...bb.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    56ebf5fffe877e059469987b09356d5fc368ca9fb69091cdc6004daf3511a082

  • Size

    36KB

  • MD5

    1af4c6c1acc08b31b2f68561cb4131c1

  • SHA1

    4f9d8e72b31f3937b1c225dcb78ed50adf6913ee

  • SHA256

    56ebf5fffe877e059469987b09356d5fc368ca9fb69091cdc6004daf3511a082

  • SHA512

    084d111b01523061339d4837d419a2de737f22f86a8fd979e91f1986911525d5f4b032e5c8e1cf98de74de5417df621c20f500f364481f2af30c1331e784f4cd

  • SSDEEP

    768:4isiM4p82yPOCk1jzaCCC8DGRfs0LN80Y6KatJhZfHui4LzFGfpp80l:4AM4p87it9JRfjfYCHkHFG/80l

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

146.190.57.132:7000

Attributes
  • install_file

    USB.exe

  • telegram

    https://api.telegram.org/bot6491699241:AAEzWMqxLHLa_DADVhFrtpk__NqYBpyS7tI

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 56ebf5fffe877e059469987b09356d5fc368ca9fb69091cdc6004daf3511a082
    .zip

    Password: infected

  • 60bb0aae72a9ba2fdb141b497da0e4671c92a6a1bd825c72a8a8c2df4de08fbb.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections