Overview

overview

10

Static

static

10

svchost.exe

windows7-x64

10

svchost.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    svchost.exe

  • Size

    69KB

  • MD5

    3d0f60a06bfead1b3ce9847dbd9ce7e7

  • SHA1

    e79eff9033d46736a876ab3379038a592d8e210f

  • SHA256

    e9dad4f37bdc3e80130637b3b5de29bf78e376cb8b8894a27ab4b727d60dff5b

  • SHA512

    c0eb730f283df54c2f061da019b57879e29b8f5549309d71630fcb541be894d47eab3943d011363dd0a9bd93e07962411454d9e88e6f5d61a4e0babfde62fc08

  • SSDEEP

    768:rOwHIR8aFGww4GZAAjGnlb0fl70xSm9WlYb03o46XeLmsR263Z8O71h80XZBSq:izR845VGaQoHdb03o46uN06OO71Roq

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

inn-ht.gl.at.ply.gg:60031

Attributes
  • Install_directory

    %AppData%

  • install_file

    svchost.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • svchost.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections