Overview

overview

10

Static

static

10

TesTManegr.exe

windows7-x64

10

TesTManegr.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    TesTManegr.exe

  • Size

    67KB

  • MD5

    2239351240ffd1b5571f281905738489

  • SHA1

    3f25ec4fc5f3804965ffadca09cf2c25745d6424

  • SHA256

    a78a86f2f5dd5767d8fca2d420ad21170d4cb8d07bc742791da4de9319c4af5e

  • SHA512

    21010a1561128d13845715f1118326c742099970ea02b3646ef4103f3c4b0846db7732037d8911a4d3f00afa204ddbb9d7de7d385fb38ef24bf572d94cb4d007

  • SSDEEP

    1536:VNvJl7f4e1Eak4EsGAgvv+bIjh5Rv9QMmOnnL9+0A:VpJJ4e1aAa+bIzJ9gOnpNA

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:36125

session-chief.gl.at.ply.gg:36125
Attributes
  • Install_directory

    %AppData%

  • install_file

    x4host.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • TesTManegr.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections