Overview

overview

10

Static

static

10

58fc5b6441...0N.exe

windows7-x64

10

58fc5b6441...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    58fc5b6441391cfd82c92499b76167a0N.exe

  • Size

    306KB

  • MD5

    58fc5b6441391cfd82c92499b76167a0

  • SHA1

    915a3f09312eaf0a1410bac32a0295b4d7ecaab6

  • SHA256

    2d5c056ef2eba356b1f29562173467f51ee8d8bff27ca58d2ec09c9ee1b3da9b

  • SHA512

    f94cd20bb16cf1970a1efd569edb0ab3b58d8af13ff3a4e8722e63f61b274489869b8f5c4ff5871f07413f4c0ee1dc9a9fee84f9a2f8800075de4156549d47fc

  • SSDEEP

    6144:/umO1P49w+GIIIIIIIhIIIIIIIIIIIIIIIU:WmO1e

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

127.0.0.1:7000

202.95.14.164:7000
Mutex

BCk8wyKJPt2PJce7

Attributes
  • Install_directory

    %AppData%

  • install_file

    CodeX.exe

  • telegram

    https://api.telegram.org/bot7488502918:AAHXNBGDnKow0UrKksNkG3-P3uaUF4SQOPw/sendMessage?chat_id=6190186263

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 58fc5b6441391cfd82c92499b76167a0N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections