Overview

overview

10

Static

static

10

How_to_los...ds.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    How_to_lose_the_feds.exe

  • Size

    230KB

  • MD5

    0dfbb3189d96b81b4a77304a853bc628

  • SHA1

    8c05d4dc8bc3489b7e0999da34b088ee51b6a467

  • SHA256

    c0b8fd391b45073b06f234ec21961a2d2c63a516ccbd07bfeb1268a0ef30a231

  • SHA512

    4d6723ed8108436333f5f6fd578b00f63fc3cfebec6f6c5497fe159f2ee24258c67b980c9394bd970dd952b6b5b1df2cd6c7cbb870c9608ee27034f9632c7737

  • SSDEEP

    3072:GVNqKbRqcOIaC8SKfbzxcwg7es6/Vsb8VKTu549oJMfF/H9N3Ky9NzLn9:/KbsCUhcX7elbKTua9bfF/H9d9n

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Attributes
  • Install_directory

    %ProgramData%

  • install_file

    SysWOW64.exe

  • pastebin_url

    https://pastebin.com/raw/EPySegcx

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • How_to_lose_the_feds.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections