Overview

overview

10

Static

static

10

7d2236f483...d9.exe

windows7-x64

10

7d2236f483...d9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7d2236f48352a9eac140f0de55cb53b0c57b3b14135dab889b5fcd1b5a575fd9

  • Size

    204KB

  • MD5

    9a545de2e6d6eb28f621076f61cb736d

  • SHA1

    4b30a9201165f5bd92df7aa14ffa412e0ea41db3

  • SHA256

    7d2236f48352a9eac140f0de55cb53b0c57b3b14135dab889b5fcd1b5a575fd9

  • SHA512

    9d54968fe188d535d48eff934d362065e2e237609376230b7b7edb4cd047a76f1a7e8cb06f52ae11e347469bc60c167957db8ce49cd2daf1b39909955fd67a76

  • SSDEEP

    1536:zt/CeA4flKCD6a1tc533JtH82fkbLDg777Kkhj+6GM9DxAbOcvnKSEQHMnvPNl:B/CeA49b6af1bLDc7ld9DxAbOcvuki

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

Valdemar-27265.portmap.host:27265

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7d2236f48352a9eac140f0de55cb53b0c57b3b14135dab889b5fcd1b5a575fd9
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections