Overview

overview

10

Static

static

10

3bc839c36e...cb.exe

windows7-x64

10

3bc839c36e...cb.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3bc839c36e16d08250bc4403d581ab822e5bb251be4c75097ffed5e29d5fe1cb.exe

  • Size

    61KB

  • MD5

    cd957aab73baa2b3aa0fd281f7d58a94

  • SHA1

    14970a8f02e6a4094c12eaca2a6e051a714335cf

  • SHA256

    3bc839c36e16d08250bc4403d581ab822e5bb251be4c75097ffed5e29d5fe1cb

  • SHA512

    861872ac6e2305d39efed9e2683595ccd11d6a977988def777a1c62c74ebe2e858ba90fed2f19cccf49379f1331dda9077a21f84d90ff700fe882243978ba5c3

  • SSDEEP

    1536:ZyE+lRntKWfjXlUQkbyk1WwTS9O4aWGdaB:ZARtKW7XllkbyBwsO4SC

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

169.254.90.187:7000

143.198.155.177:7000
Attributes
  • Install_directory

    %Temp%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Detects Windows executables referencing non-Windows User-Agents 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3bc839c36e16d08250bc4403d581ab822e5bb251be4c75097ffed5e29d5fe1cb.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections