General
-
Target
5e0bbc0fe34574578525c82881f6cb902683793e0342499859b5285801688211
-
Size
41KB
-
MD5
db7f1c066d098debc6a8c94bc55d65bf
-
SHA1
f5b575baf68a9120ab4eb68ceb2e1be3ec30f879
-
SHA256
5e0bbc0fe34574578525c82881f6cb902683793e0342499859b5285801688211
-
SHA512
00c6265bc3652d8afc5dec3f915b0134a7dca9178d78cb315ee7f49c45b325b11abc0214d8d5f68a562c608c09dd49f2ded22a44563f9c7cdbf689bd2e6a819a
-
SSDEEP
768:xCwPO1kcah67ECAr43MxfJF5Pa9p+q6iOwh23/ibr:xZGkcawARrNRF49Iq6iOwoa3
Score
10/10
Malware Config
Extracted
Family
xworm
Version
5.0
C2
147.185.221.19:2137
147.185.221.19:33365:2137
147.185.221.19:2137:2137
Mutex
x6w14awckFI9Fg93
Attributes
-
Install_directory
%AppData%
-
install_file
Wiindows Update.exe
aes.plain
Signatures
-
Detect Xworm Payload 1 IoCs
-
Xworm family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
5e0bbc0fe34574578525c82881f6cb902683793e0342499859b5285801688211
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections