Overview

overview

10

Static

static

10

infected.exe

windows10-2004-x64

10

Resubmissions

20/06/2024, 17:22

240620-vxtbwstark 10

20/06/2024, 16:57

240620-vggcdsscqm 10

Sharing

Copy URL Twitter E-mail

General

  • Target

    infected.exe

  • Size

    76KB

  • MD5

    a1afaea404e9f505c06b6ceaf087bad6

  • SHA1

    f3231b75673922e3dfce1706a3a5587979f04c25

  • SHA256

    a0f69b466322e4b95af9d008e4ee9e758dedb3b27a5c6a50d4361ccdd88c3ae1

  • SHA512

    5fa770e23280b31f84dac094243e26b5176697eb4235f67112afde6d82e064278cf42ccea9ab1d236740a87648681ef4c673e06a7e2dee0b8d5c2d0507035dc9

  • SSDEEP

    1536:xA98LuxE8SsXHwshIi6/C9pAkbGq8neagvtS8d6Q36TjDOmUH3o:xUsux/1HhI1/C1bGR3gvtopjDOmUXo

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

sebeee-39917.portmap.io:39917

Attributes
  • Install_directory

    %AppData%

  • install_file

    RuntimeBroker.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • infected.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections