Overview

overview

10

Static

static

10

Built/scch...0).exe

windows7-x64

10

Built/scch...0).exe

windows10-2004-x64

10

Built/scch...1).exe

windows7-x64

10

Built/scch...1).exe

windows10-2004-x64

10

Built/scch...2).exe

windows7-x64

10

Built/scch...2).exe

windows10-2004-x64

10

Built/scch...3).exe

windows7-x64

10

Built/scch...3).exe

windows10-2004-x64

10

Built/scch...4).exe

windows7-x64

10

Built/scch...4).exe

windows10-2004-x64

10

Built/scch...5).exe

windows7-x64

10

Built/scch...5).exe

windows10-2004-x64

10

Built/scch...6).exe

windows7-x64

10

Built/scch...6).exe

windows10-2004-x64

10

Built/scch...7).exe

windows7-x64

10

Built/scch...7).exe

windows10-2004-x64

10

Built/scch...8).exe

windows7-x64

10

Built/scch...8).exe

windows10-2004-x64

10

Built/scch...9).exe

windows7-x64

10

Built/scch...9).exe

windows10-2004-x64

10

Built/scch...2).exe

windows7-x64

10

Built/scch...2).exe

windows10-2004-x64

10

Built/scch...0).exe

windows7-x64

10

Built/scch...0).exe

windows10-2004-x64

10

Built/scch...1).exe

windows7-x64

10

Built/scch...1).exe

windows10-2004-x64

10

Built/scch...2).exe

windows7-x64

10

Built/scch...2).exe

windows10-2004-x64

10

Built/scch...3).exe

windows7-x64

10

Built/scch...3).exe

windows10-2004-x64

10

Built/scch...4).exe

windows7-x64

10

Built/scch...4).exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Built.zip

  • Size

    1.1MB

  • MD5

    429448c3350539485b2aa25603938f57

  • SHA1

    8e4ffe7fc2b931390e50a69055565567f1bf3b85

  • SHA256

    455a732ad92171003fe31cfbb66a78bd29048dfda0546faa834564929d096531

  • SHA512

    436454d929277e07adc96cf7cb669ccd75d2e5fd466b951c966eac5c41da6dc5f21bafcc6af8f307d3c8a79ea47feebaa15ce00e7f1cb63eb86de91efe328c0d

  • SSDEEP

    6144:VKPwF+jk5iLW98bCZoHelsrMJy3YVOktN:t

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

politics-fiber.gl.at.ply.gg:47430

Attributes
  • Install_directory

    %AppData%

  • install_file

    scchost.exe

Signatures

  • Detect Xworm Payload 32 IoCs
  • Xworm family
    xworm
  • Unsigned PE 32 IoCs

    Checks for missing Authenticode signature.

Files

  • Built.zip
    .zip
  • Built/scchost - Copy (10).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Built/scchost - Copy (11).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Built/scchost - Copy (12).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Built/scchost - Copy (13).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Built/scchost - Copy (14).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Built/scchost - Copy (15).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Built/scchost - Copy (16).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Built/scchost - Copy (17).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Built/scchost - Copy (18).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Built/scchost - Copy (19).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Built/scchost - Copy (2).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Built/scchost - Copy (20).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Built/scchost - Copy (21).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Built/scchost - Copy (22).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Built/scchost - Copy (23).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Built/scchost - Copy (24).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Built/scchost - Copy (25).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Built/scchost - Copy (26).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Built/scchost - Copy (27).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Built/scchost - Copy (28).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Built/scchost - Copy (29).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Built/scchost - Copy (3).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Built/scchost - Copy (30).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Built/scchost - Copy (31).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Built/scchost - Copy (4).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Built/scchost - Copy (5).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Built/scchost - Copy (6).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Built/scchost - Copy (7).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Built/scchost - Copy (8).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Built/scchost - Copy (9).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Built/scchost - Copy.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Built/scchost.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections