Overview

overview

10

Static

static

10

3048-5-0x0...ry.exe

windows7-x64

3048-5-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3048-5-0x0000000000400000-0x0000000000410000-memory.dmp

  • Size

    64KB

  • MD5

    a92c064d97af98a320f7cc201fe647ad

  • SHA1

    0c909d993217b0430e65895b7c8c9ea15171cdab

  • SHA256

    c3f064d73a449a1c600c117eccc13b664660e3759a0e479fcda476669fdb2f24

  • SHA512

    1cab38c973b033fcc14ad07e5bfd86604d2bbe0455d03e1f429bc6ecff7eeeea22408c63e4c34a6f7b0cd1ea608b50474e4e0a46416cca4ad04d08ad63191040

  • SSDEEP

    768:/GLtt3QI2/yQJVZ16eo8icHyPEWbFb9YjOMhVQXv:/Ab3QI2/yQB8eNicHyMSFb9YjOMP6

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

vbdsg.duckdns.org:8896

Mutex

GgQUWuMVOC7DAikW

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3048-5-0x0000000000400000-0x0000000000410000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections