Overview

overview

10

Static

static

10

Registry.exe

windows10-1703-x64

10

Registry.exe

windows7-x64

10

Registry.exe

windows10-2004-x64

10

Registry.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Registry.exe

  • Size

    77KB

  • MD5

    9d6650618c58c87940342a370a32e509

  • SHA1

    c579fae20e78573deeec2059c8119083ccdff7e2

  • SHA256

    b9254a6ecd096658f98b82ebb751201b4e447b5ce3b7302b48fb228c9b516c23

  • SHA512

    d37b31b2c9669980279e2ebf247811ddd2f43231766a735b8a904dd9de1034e10a5fb7ee23c80717f88d5e173b0ee84ee890b95f50e71590b57e03d8b81d6020

  • SSDEEP

    1536:BQa31Z6Y6BFzJufgQIUbmVCcGDl4gBQOV8EaKiRE:BQZhB5IYTUbm1Yl4SQOV8EqE

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

147.185.221.20:49485

Attributes
  • Install_directory

    %Userprofile%

  • install_file

    System.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Registry.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections