Overview

overview

10

Static

static

10

[re.exe

windows7-x64

10

[re.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    [re.exe

  • Size

    192KB

  • MD5

    16284b9b8751956638ee373798924b1a

  • SHA1

    58ccb70a7319dfb593d1c22c2ea1af68706b037f

  • SHA256

    f95f2f8419a6c3feabe49924c3d2f86c32508e3353f11261bd4407f4c4f62849

  • SHA512

    2c0f5156da8fec0c991dea46adb9c4546a74534645848027233a2eb28085d11380e11c944e98822ef204cd2298e1c92df08cc1718e985014d373d428beae1245

  • SSDEEP

    3072:U5gIq2VWvt1gb1FonCkkO4bvgO3Bz65/M6If+3Js+3JFkKeTn3:v2Abgb1OnCxBt25

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:1682

147.185.221.17:1682

17.ip.gl.ply.gg:1682
Attributes
  • Install_directory

    %ProgramData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • [re.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections