Overview

overview

10

Static

static

10

0a142ce171...AS.exe

windows7-x64

10

0a142ce171...AS.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0a142ce171ef3ad590284c2a2e6b23c0_NEAS

  • Size

    68KB

  • MD5

    0a142ce171ef3ad590284c2a2e6b23c0

  • SHA1

    00da5de1546b4d2d582b6b07872ced21f3fee16b

  • SHA256

    94b21833299ce787d98161be56865cea217e3fab8d20ca1b76d3c27f0468a765

  • SHA512

    c4837e9d8b7cb156f85692eaa6c18df3867699ac65c3ad5bec9897a1d06039769d2854b5ade71509831e252e719df2685e57c73e8cae572bc5efaed78623e5f1

  • SSDEEP

    1536:QwIV6YgjvIi0OZpOj1Dp5botuom8/qhqupt6wQOWgZa:oV1cIODODzbotykWqE5QOWgZa

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Attributes
  • Install_directory

    %ProgramData%

  • install_file

    xrt.exe

  • pastebin_url

    https://pastebin.com/raw/LutjHFcv

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0a142ce171ef3ad590284c2a2e6b23c0_NEAS
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections