Overview

overview

10

Static

static

10

test.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    test.exe

  • Size

    36KB

  • MD5

    dce163999ba747167ed7b78daf4fcf38

  • SHA1

    434dc1f13b4cb845fbc5697224da478719c97a9c

  • SHA256

    f2a67f3f05c0af97d2c57bd26c6f230f2fac9405e4d383b7df9d82154f29090e

  • SHA512

    f1d42caad7d6aeb9d270bf4b1cbad3fa7913d1086ce424443bcfd969107a62f140ce8b36777705095637eb52df5b7f539f79f204877485a8c49286a1387a0244

  • SSDEEP

    384:8xTA5yOqIMtqfZD1vkSQLVxXafuYAJ7uxhXv9LzIJTiK69FA5mpkFy7BLTQYZwnx:ETAJM/jPWzJzIw9FALFyn9ChOjhqD2a

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

orangecat-47363.portmap.host:47363

Mutex

P6CfpGqEI8xlLvJn

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • test.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections