Overview

overview

10

Static

static

10

patch for ...0b.exe

windows7-x64

patch for ...0b.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    patch for version-d8aa63d3654646d0b.exe

  • Size

    82KB

  • MD5

    3e38bec199f483f558b0330030c4165b

  • SHA1

    5de15adf326e0827ac1162ba5c13648691bd46ca

  • SHA256

    7493e1a3a07f3e5ab65faa623d7c228360e4f3fc3492a5cbf69f1bd1e61da100

  • SHA512

    ebaa9fe2a723d5c77ed4caf6bae973dabdd3da7725b3439fe18d2410a7df7d206d49b3dd506d8ce5e9db0f2bda16a96ff16edd4e2d92fd17b9ec7d993889a802

  • SSDEEP

    1536:dB7gCNuU8ZsEuE0toc3zTB8Xo2FtsCQ7OGCnbSCUUSbK9mXSB6VPZ+bOWgu6Wxh+:dBpP8DqtvDTMqCO6nbSL7+97zbOWguhG

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Attributes
  • Install_directory

    %AppData%

  • install_file

    win32.exe

  • pastebin_url

    https://pastebin.com/raw/CxfMChwY

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • patch for version-d8aa63d3654646d0b.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections