Overview

overview

10

Static

static

10

Setup.exe

windows7-x64

10

Setup.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Setup.exe

  • Size

    174KB

  • MD5

    87f8408575c846e68a8eae652e21f81a

  • SHA1

    496dd13855e6b05b8bad5d099f7df11bb66bb1d1

  • SHA256

    7341920e367afed84c931facd49adf11ca93e1fcec734baf1d350950ec142182

  • SHA512

    c4113315440adef8a5c67597859cb09d49145da7c103c0b5e7c5954cb5930ae9c5b9db159e35903f1737e7dedd23d13c0fb7ca101e73c571a0af21754a44a911

  • SSDEEP

    3072:nEu8GPT3ofoEbbMn9tTC1BO3PzrBz65/M6If+3Js+3JFkKeTni:EuVT4foEbbc5rxBt25

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:2029

192.168.56.1:2029
Attributes
  • Install_directory

    %ProgramData%

  • install_file

    Windows Defender.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Setup.exe
    .exe windows:4 windows x86 arch:x86

    Password: e

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections