Overview

overview

10

Static

static

10

f55d89f825...92.exe

windows7-x64

10

f55d89f825...92.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f55d89f82515bde23bb272f930cb9492.exe

  • Size

    36KB

  • MD5

    f55d89f82515bde23bb272f930cb9492

  • SHA1

    666d0f5a98f03292abf16cd2de599997c836926a

  • SHA256

    4d9fb14e15d1613a7a5d70efbacb0f153729f02216116c3f7f117b033bd7655c

  • SHA512

    a7a62daf90aae27207b77034e8a76d5b3f8aa05430bd8768d46be7f3843962ddc1ef154691dc0f26051605fbb36269e59f18c3c75fdf72222346188e7a6cf03b

  • SSDEEP

    384:/IFAz8mqQNv9qNx7kKka/sVxCTjMBVJYX7+u91X5Lj6WmyyNApPzuSvZ5mpkFyHZ:EApN1/qEMFj60y+hLFyT9CCOjhyPy2B

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

85.203.4.146:7000

Mutex

eItTbYBfBYihwkyW

Attributes
  • Install_directory

    %Userprofile%

  • install_file

    svchost.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f55d89f82515bde23bb272f930cb9492.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections