Overview

overview

10

Static

static

10

injector2.exe

windows7-x64

10

injector2.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    injector2.exe

  • Size

    49KB

  • MD5

    c7c81f028f01c5a409fe6da6c2491ec6

  • SHA1

    f32b8b689e74496edb5976bbc6297931323be9c5

  • SHA256

    8d89bc57d87a8fdd7a77c208314fdd0ec5d76613f9f4359b0b77c02cf67412f6

  • SHA512

    3f2666ed8e7782ade33df0a93d260597b4d3607e743b9040df44f9143629efff44089287c884fb69abb45f53549d1a1e87cba9623eb05b291561a2b5e22a0892

  • SSDEEP

    768:mWO7VMyjFxFyKlSFyx9DWc6YOjhkOK6zbwonH8wSpO1bNJ:jgVMy/YBFU9Dd6YOjlDwoH865L

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

https://pastebin.com/raw/H3wFXmEi:324

Mutex

Wm7G1E9sYWm3ER2j

Attributes
  • Install_directory

    %AppData%

  • install_file

    injector.exe

  • pastebin_url

    https://pastebin.com/raw/H3wFXmEi

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • injector2.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections