Overview

overview

10

Static

static

10

2572-23-0x...ry.exe

windows7-x64

2572-23-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2572-23-0x0000000000400000-0x000000000040E000-memory.dmp

  • Size

    56KB

  • MD5

    26ebfc7097917ab138397eb40b173bc6

  • SHA1

    aa26dfa5e40c993045712d3ee1b8c1b406f8ebb5

  • SHA256

    c20c2072fc0415fe91cbdfb4cc23c40ab721b9669491eb61f561b0f137eb1394

  • SHA512

    2f7b001a5415f17d4318daacf12702d73723334db887bf5a1e89bf689ee9c615211210f632c21c07f2d70c114e7810211de0f2a975b74ef98f8c7f473a3b9d7b

  • SSDEEP

    768:eUa+vNohsXn42JiB70qVF49jJ2Ojh5bu:NvNohsn4WiR0QF49jJ2OjjS

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

79.110.49.133:5700

Mutex

Bg9JRZDpyEfXxrAy

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2572-23-0x0000000000400000-0x000000000040E000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections