Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a.exe

  • Size

    85KB

  • MD5

    417a969f9dc63104439b682293408bf9

  • SHA1

    688e3dc0969ee91f733bf3535c23dd818d3d57dc

  • SHA256

    7fd6c49581ca8eeada8ed8914c01c2216c79c43ec9ac8955d68a9e8f493aba0c

  • SHA512

    96131dbc21d013e330eecc0ecd3fafc2918280c3b167a1227469579f03763a8b258de881bf8f55ee84bc4d450b9566d990d2002897270bd303c37bd59e27276c

  • SSDEEP

    1536:RCTZhI58OPqP8UummNsBenUbDypu37HVhba/GJdiKZLx2vBfKC3hG4S7OYQJLrfr:R6ZWYP8XmnQUbiu371hba/EI+x2JiwwW

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Attributes
  • Install_directory

    %AppData%

  • install_file

    sockhost.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections