Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ReeKO.exe

  • Size

    148KB

  • MD5

    97a897fd58643739fee29c583fa125f1

  • SHA1

    ddb321e8a31b9fa5e9d6e0f62adb732d78d5de9c

  • SHA256

    03707dc32592ce9939b0e184bb9a25d95c96f020265ff30fe6bfb68562033b6c

  • SHA512

    aa7bd203d74777e9f67264846f60d590edfef4d2a956b1c983cb31c70bc96a3aeb44a9667829710acd574fc3a6acee7729b435a8842f0b5ac83d3ccbb6e853e5

  • SSDEEP

    3072:zkF718fFk9wBO/8a4NpVq8BxFRzaqF+o2GQJ7/JzqVfGv5:zvtk9EagVqwlL

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ReeKO.exe
    .exe windows:4 windows x86 arch:x86

    Password: XXZ

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections