Overview

overview

10

Static

static

10

vencords.exe

windows7-x64

10

vencords.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    vencords.exe

  • Size

    51KB

  • MD5

    6c38d2e2a2dd088682fc329061b18a61

  • SHA1

    8d107295c87c5e650b92e0a13ee25096713a83cd

  • SHA256

    b0edc5604004d58d4f08fefc1aa48ae5174e2f525e6c7cf02638944f9e572246

  • SHA512

    e0ac890e86c036811f7d88e4113cf30a92109f00572732cdcf492b83afbe35f38980a41895d611780c29e052546b17e923abe84a52d73e69b2f0c12ac90d71ce

  • SSDEEP

    1536:bULDbQZHmH03ooNmFbeF8ubkbzg9jzgmoO7Gy8h2QGx:b4D1qYy88kbzczgpO6y8cfx

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

san-periods.gl.at.ply.gg:45994

Attributes
  • Install_directory

    %AppData%

  • install_file

    vencord.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • vencords.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections