Overview

overview

10

Static

static

10

auto.exe

windows7-x64

10

auto.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    auto.exe

  • Size

    68KB

  • MD5

    fa291182218298213cd043658989c808

  • SHA1

    d8d4d22ed17933baab6341406fec95e706f665e7

  • SHA256

    0962b86031e45e63200531850fa12f84f04da0145ce6e539a03072df3cb3eb5f

  • SHA512

    a005683061cc7b288e5c7d42cd5a13f9bd7f0959982168fa430b2fc391a410a5967a7e1ef07a4f6fcc502d7e54ed2c0e3b46f8b2e06932580d647fcdd6e3635f

  • SSDEEP

    1536:szwck/FmMOo8gEdRA58OIGh9Zb0t0OcLzay56Xd8CF+2oeOHuivW59:4SN+xbW8O/b0t0xzayP7aOOivW59

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

main-although.gl.at.ply.gg:7001

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • auto.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections