Overview

overview

10

Static

static

10

virus.exe

windows10-2004-x64

10

virus.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    virus.exe

  • Size

    75KB

  • MD5

    68bdd06a8894de7942ec029dbd4eabd7

  • SHA1

    f40dc77be4cb4c4c2b41fa4f44e354cbbd0c7e42

  • SHA256

    189dc115df0114292a3fb6881b03f95b11333a402d744174ec1e85dea9efa19e

  • SHA512

    c9c2dbde1bb6c42c855eb2e1e15f101a638c3b9887875f10047a3141d38f0f1a7c2ef7a8c67ad679b053eb332aaa13c99ad04480aa7943578c5e76edea21a785

  • SSDEEP

    1536:Z9X0/TjRzyuZ2jfChnYcnjb7bNWlWOpAZ1m6SLbLOCZ+IEW:Z9XiHRzxMcJb7OHpQ+OC0lW

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

  • pastebin_url

    https://pastebin.com/raw/H3wFXmEi

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • virus.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections