Overview

overview

10

Static

static

10

2024-05-05...ar.exe

windows7-x64

10

2024-05-05...ar.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-05_eacfbb6508313a02122a8b8efd1c4684_hiddentear

  • Size

    161KB

  • MD5

    eacfbb6508313a02122a8b8efd1c4684

  • SHA1

    448fcc296656f67dcdb6b0ae7e77fc40082ca217

  • SHA256

    b96b1bcd234eebf945b14f9cda91dfd627376f2956ad2784023096558571f8b8

  • SHA512

    7632f195461dda2ba704bdb16fc9309a96da725336096aad143fe25e03daa86f535d30e93c49ffefaf2ef2374e12a5d4a59a28e99c04cbc87ac7a1ebac1c8ee4

  • SSDEEP

    3072:ieEml4XRwQZbwil+Oue8eM+lmsolAIrRuw+mqv9j1MWLQI:oo4XRw8bJNQ+lDAA

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

3.1

C2

172.94.32.98:7600

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Detects Windows executables referencing non-Windows User-Agents 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-05_eacfbb6508313a02122a8b8efd1c4684_hiddentear
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections