Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    123.exe

  • Size

    58KB

  • MD5

    c8c913cda0cff093b1088cbb0d233873

  • SHA1

    7e50bd283614ce3860eea33a3a3dd276310ec038

  • SHA256

    1682de93786dab846d25a8f181f9657d19fb6b3686ab9d284e1b91fb96da7141

  • SHA512

    9aef23ae8296d21ea26c74f8e7326bb7992dd4653335daf1b9cbf45ee19e9547337f49efa958c7db826c4e2e1be35bf76873b28fa9a7ecc83991075ee79f1d8f

  • SSDEEP

    1536:vP+Or6Wc/DjiqjyNzb211SyhvPL0ORfLWt6BJ:vT0jxjmzbK15VD0Oh6G

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

3.1

C2

19.ip.gl.ply.gg:35437

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 123.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections