Overview

overview

10

Static

static

10

ssssss.exe

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ssssss.exe

  • Size

    73KB

  • MD5

    a6e878f9c7fa14fc3da437d04e720f72

  • SHA1

    87363ffbe4d48355663004a0973bcf599c6de2b1

  • SHA256

    3953fb8620d6bb1a30ba339218af2b3af1eaa33b275fe798420d9957309c1e6c

  • SHA512

    27b7b1e45a9d68aa39d05bc3651a202db83434034a7e6d258ac6e1c38773e11966c246db28462b46b76b6db61b6672d0406ac975d37feb9321e1328bf270537f

  • SSDEEP

    1536:2GMHVbg9jE///J45KVH+bGU9VarN8vaPEO/X4Iy:/0/B4YVH+bGMitEO/XVy

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

147.185.221.18:46309

Attributes
  • Install_directory

    %AppData%

  • install_file

    PsTeam.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ssssss.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections