Overview

overview

10

Static

static

10

Everything.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Everything.exe

  • Size

    52KB

  • MD5

    1c11d26c04f12d0aa0adb5eba5b66a33

  • SHA1

    94ddd2eaec2a90c275f8c81a9b160a793b941620

  • SHA256

    869206cacc085d36961241dfb05e7a723b032cbba0a403f5c02756b699ce2d80

  • SHA512

    b02998138ed32e9cf5d87b9040d82f3f738eda42a462e5322bc572d4f572a93704227b5d7b5f9f4e025084b741392214b75d2f0d427eb2a426ad751edcd3c7b6

  • SSDEEP

    1536:3VWI8/Kz8cY1h3s5XH7XGsbD/j/Bdj6YO89+:YI8M8GXvbD/9HO89+

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Attributes
  • Install_directory

    %AppData%

  • install_file

    Runtime Broker.exe

  • pastebin_url

    https://pastebin.com/raw/kYPYyCCf

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Everything.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections