Overview

overview

10

Static

static

10

svhos.exe

windows7-x64

10

svhos.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    svhos.exe

  • Size

    68KB

  • MD5

    51a604e682346962f70b7ab0e3b197de

  • SHA1

    cbd78fd3dfb8286f6fbd52c1cff0a32898d568dd

  • SHA256

    33bd07f02f8e26e859051502baaebfc1073277701d1b787ade9cc24b0063824a

  • SHA512

    65268d6fc47ca30791cffcd62c97da97eae517bcd18378752880accd35b5967346489e14e38af695f77629708444ffff0112faf890d3f8124214e9fd5a78e74a

  • SSDEEP

    1536:UTe6fzfNHbcNL1m0Z+bTJ9SUll46iuMpNUONd6C:UFrfN7cB+bTebzNUONYC

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

data-dakota.gl.at.ply.gg:2094

Attributes
  • Install_directory

    %ProgramData%

  • install_file

    svchost.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • svhos.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections