Overview

overview

10

Static

static

10

er.exe

windows7-x64

10

er.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    er.exe

  • Size

    67KB

  • MD5

    9671b824ee58139bf10084b1b336a0d2

  • SHA1

    c6f13afd0ae2c16c1e148dc1be6793d1d2e001a5

  • SHA256

    86dcdc6b0fed5b4b5d621d1616f7383af5e4438e3c3277cf311c08d249a80e90

  • SHA512

    5a83047aaa10c945cff2d933514c5b52c798ee00e35eab98fd95245a9f7b0a7b9be74116372c292f08a3c943f02dcb5c832327bc759e473a587e16198d303e30

  • SSDEEP

    768:1FML+tVjRDtoJ5iV0jED+YHi/A/T6CNY+7b2hBd1aJqE7BAD6sBnHhOcPhTDZh9N:LXjRDGnPM+PUhb2hH1aXiD6svOgVtnN

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Attributes
  • Install_directory

    %ProgramData%

  • install_file

    USB.exe

  • pastebin_url

    https://pastebin.com/raw/sGaZ7csB

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • er.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections