Overview

overview

10

Static

static

10

windows7.exe

windows7-x64

10

windows7.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    windows7.exe

  • Size

    83KB

  • MD5

    2ae94c8c6ed8600edef03ed9c8938cff

  • SHA1

    a739e94764fb6defeba1ca09a4f3651ab06f2e1d

  • SHA256

    a45cf3b7495882df615ec77dbded36a67a6d78ef972bfeb6bde008e288057865

  • SHA512

    2a5a659d040cd429ce23a4ec6ef4fa004cd5ec0e89dce85e12f6021dd22b330db4cc146ab837dd8355af7be9faf47cd396dc7a9a6855bc7ff9f8298c3b0a81ff

  • SSDEEP

    1536:zs7eCfxK19/4+e0Dsu3YeEbvWAF1/ely6MupO49haOdeXcq:ONZKD45uoTbvW6eldUHOMsq

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

https://pastebin.com/raw/mfW9zYDR:8080

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

  • pastebin_url

    https://pastebin.com/raw/mfW9zYDR

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • windows7.exe
    .exe windows:4 windows x86 arch:x86

    Password: 123456789

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections