Overview

overview

10

Static

static

10

svchost.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    svchost.exe

  • Size

    62KB

  • MD5

    949f229078d60fe3862264f9275b7888

  • SHA1

    5882bd15822ba4f2b67122459ac23d4a7bf38af8

  • SHA256

    c13d9f4ccd9e4c95c416f55fa9a8a923b35f34ab8e269542bfc9aa5833a990da

  • SHA512

    aca55359efdc9679d5277e738922ddf9443d6015a7989552eb14388cd13d47ddf42ed536190c5dc725a3a5b5651b21e5f0b02339e0e38c690d9edcc3e2e225c9

  • SSDEEP

    1536:anBpklFiYq2d+Jyu4Qlc+bT65kKIIXGK6DdyOeZMJJwCJ5:o/k1qEC4F+bTnBIXhOeZMJ/5

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

though-ever.gl.at.ply.gg:39233

127.0.0.1:39233
Attributes
  • Install_directory

    %Public%

  • install_file

    svchost.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • svchost.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections