Overview

overview

10

Static

static

10

dwdadwawa.exe

windows7-x64

10

dwdadwawa.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dwdadwawa.exe

  • Size

    63KB

  • MD5

    7bb9d6edfd29f0b72b7c628b9fab2a3e

  • SHA1

    f603ce6c91c1314c4af009792cfa725ce953e906

  • SHA256

    d35f477971442252b444638b427427ad2bca84f4991b1e1f6285cc00152b7701

  • SHA512

    38403a5e83716f3a98ff48653535a3599faa221c9dbfe9cf858b776975d4a8e73632e212e128fb6c6f73eb99f31a1f4e83696705df2fac72e2bbb179f701725d

  • SSDEEP

    1536:ZYWnc4BSrIN5GMAFg6iu80+wcGr6bg9+UEPPArfh96GBo4AOnr5z:Z4aZAFg6FC5E6bg9+ZI/oOnr5z

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

main-although.gl.at.ply.gg:30970

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dwdadwawa.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections