Overview

overview

10

Static

static

10

0x00370000...11.exe

windows7-x64

10

0x00370000...11.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0x0037000000015f54-11.dat

  • Size

    40KB

  • MD5

    7ea387ab126b2ecf3365d448a318a433

  • SHA1

    71b6e05898b68ed72ca95266d6293b225c40b612

  • SHA256

    573f3d316ed68ea2d4762a657dcc62416b763a8fcd1f99017f02d3ef5c215015

  • SHA512

    68830f84bf9f0a9e75a999907f7e7d816f89aa745e92078f56f303edadb236e14957e0594290f297fd4c0175ae72be02542cabe974a404fe961b7ab4bf945825

  • SSDEEP

    768:lNfPMSk3K/EzTb/0X8WuFZ4sJF5PC9O9d968OMhM3/qj:jf05a/CTjS89/Fc9Ud968OMiY

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

45.141.27.41:7000

Mutex

9ZF9ZsOZGh1T1r1n

Attributes
  • Install_directory

    %Public%

  • install_file

    csrss.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0037000000015f54-11.dat
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections