Overview

overview

10

Static

static

10

Testappfix.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Testappfix.exe

  • Size

    82KB

  • MD5

    42521c7c99c59d0cb290cd8425de2ea4

  • SHA1

    dd4269531c146208b10c1aea95cfa498edbfe9a3

  • SHA256

    112fba396a2df74726dd2b260d09fe163a399a30080b3c8f4d2dfd544fa28a07

  • SHA512

    42e42331b60036a34657090c33b61d6eb0a201d0dc3c7154000e2c2df61f7f2b59209fb7603ab309c4500b15380efb88cef04fabbafb51b9e6ad63a83dabe174

  • SSDEEP

    1536:VcjYbQnFCQt6djmtUR+bZuLyYhD6Q9lFsSOTx1frFyszSpon:GYcnpteB+bZjG9lFsSOTx9rkswM

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

80.133.66.241:7777

Attributes
  • Install_directory

    %Temp%

  • install_file

    AntiMalware.exe

  • telegram

    https://api.telegram.org/bot6931107262:AAGmL4o7X7zVFFs3KoCS-KEOVazABjZbSjs

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Testappfix.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections