Overview

overview

10

Static

static

10

output.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    output.exe

  • Size

    40KB

  • MD5

    d3de0ea90752c4ab1b042076c6b81a67

  • SHA1

    5b7278d0e805af66afa7b7645d1fb38eb6aecdd3

  • SHA256

    7726ebde4fa908fa3cce1de3bc82f1616c52eba573d021541f3f5393de934669

  • SHA512

    c7156a4ca8792e592df0c4a49b72f991b2548c5d592b43c3b9d760c351fdaaa1856e655cb4d585cb1541c938efcabd6078b8e09aa8ae6874e246b8f4a044e932

  • SSDEEP

    768:xCYzP4KJq5tasTfdvthlKuuJF5P+9O9fj68OMhk3EOi:xPz9s597JJKjFs9Ufj68OMaQ

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

mor3nooo-29651.portmap.host:29651

Mutex

KCtZ1pAc27xipdq8

Attributes
  • Install_directory

    %AppData%

  • install_file

    output.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • output.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections