Overview

overview

10

Static

static

10

.wondows.exe

windows7-x64

10

.wondows.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    .wondows.exe

  • Size

    92KB

  • MD5

    e686e7a58632ea47704618d756cc7604

  • SHA1

    b37bf5b7bb1db3cf5a1f38ac69a5798c33d0e06a

  • SHA256

    659fc6307ea2556e1a30d48f547572d8394a4bd19ceefa95145a5b1abd33f4f8

  • SHA512

    5595cd9d24c7496033f37ce036cfd15987eb4356a9a70afe3cc5a6f0e52d3205789ee2da9f8a0c8cc041a99875396238cd18a99075d6aa6e7c684c69b7629d21

  • SSDEEP

    1536:+W0i5TH8zu4VInurJs8bB6UehPENCbr5oNJAGvEo6FHyOwOKO1H3:+W0ix0iMNCbr6owOxX

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:1111

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • .wondows.exe
    .exe windows:4 windows x86 arch:x86

    Password: 1

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections