Overview

overview

10

Static

static

10

c5671b1f5d...12.exe

windows7-x64

10

c5671b1f5d...12.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c5671b1f5de252d3e2dea9e21595503c11a5bd73c52e4671230cfd9bc954ad12

  • Size

    69KB

  • MD5

    02f72b6c788bd84d5d77d38187e50bb2

  • SHA1

    eb37f0a3318a9fa835797111b8af7f9da4b504a4

  • SHA256

    c5671b1f5de252d3e2dea9e21595503c11a5bd73c52e4671230cfd9bc954ad12

  • SHA512

    14b0c309baca1a28a0ad142f7b345b335d08213dfdce48fc85540ef125b222cdbeb9cc25c5e478a55bc44e2987a2ae17f8f84359d5e1287127724944d4b849f3

  • SSDEEP

    1536:3lacDNh3hmv/HFrEIUPo/ebETBF4Vdh6XOO32mpNr8Kj:3lacZmXml4ebeQcOOGmpGKj

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

16.ip.gl.ply.gg:57938

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c5671b1f5de252d3e2dea9e21595503c11a5bd73c52e4671230cfd9bc954ad12
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections