Overview

overview

10

Static

static

10

XWorm.exe

windows7-x64

10

XWorm.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XWorm.exe

  • Size

    201KB

  • MD5

    acf8853358a7aa1b667fea958b893a5d

  • SHA1

    bb13587ce9f55a75765fe12994debb6e07a5810a

  • SHA256

    349b3468ba55fa9b2d4e800323a28b7b388663cf54ab35e688ae67a9819e02b6

  • SHA512

    cb8a46077594042ba43d85acef88d6e0a6c9e9f2c7e9c6c185ecd5d1c36a5f71c75759dbbbda4f3b47f80131f48b3cba808d487b11a2eaceecbdf9c19afe2c84

  • SSDEEP

    3072:fNE2oXkEPibC1/EaOTPTVdwtA2ewhLapuvpAsZOyMqmyBeYVYv:fjEPib4cYP/GWGwqqm1

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:37915

5.39.43.50:37915

de-engines.gl.at.ply.gg:37915

these-accommodation.gl.at.ply.gg:37915
Attributes
  • Install_directory

    %AppData%

  • install_file

    dllhost.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XWorm.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections