Overview

overview

10

Static

static

10

1fea278ca3...68.exe

windows7-x64

10

1fea278ca3...68.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1fea278ca3a9cec9148ddd053ed96f0217b5c69dddfe09797e89d2bf23d61a68

  • Size

    69KB

  • MD5

    f503681758b9b206bbe44b45e9233b0c

  • SHA1

    9db78ae4b6632aec5b5ec8b897c1fd1fddd3d25e

  • SHA256

    1fea278ca3a9cec9148ddd053ed96f0217b5c69dddfe09797e89d2bf23d61a68

  • SHA512

    3443e8cec6c550d21b0696ab7441ca47f17feafdaf25cb37004abd25513b295663b3c7c996bc19837e13ad16df43ddeb17a0f34e204eef13b9ae107db574707c

  • SSDEEP

    1536:eOon1i3Sw4Molu+Lu182Azx8H+bSK9WMxy615GOKwXULQJ:5yh2E8H+bSK9Lh5GOrXHJ

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

likely-necessity.gl.joinmc.link:25565

Attributes
  • Install_directory

    %Temp%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1fea278ca3a9cec9148ddd053ed96f0217b5c69dddfe09797e89d2bf23d61a68
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections