Overview

overview

10

Static

static

10

8e85bf366a...6b.exe

windows7-x64

10

8e85bf366a...6b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8e85bf366a5a80073a728274b263bbfee1c81a7bccfd0876a20587b000a2766b

  • Size

    42KB

  • MD5

    f322fda971c33ea609ff939c6168d209

  • SHA1

    c2bbb66f85361f7210206c7aa5dc5fbc1ff2c9d7

  • SHA256

    8e85bf366a5a80073a728274b263bbfee1c81a7bccfd0876a20587b000a2766b

  • SHA512

    d8942e3b75da81fdd81b49edb3eddf8e69ec4769ea09ce08438e58b5f3c4ebabd87d933cd72e3f46fd78351995c71afa5d21315b021d4f24d7355b4150a3a585

  • SSDEEP

    768:L6j93gT0x3XBkVpK2+1pout8PeiFF+g9h7ef6FOChc8gLHZs6g:+5wA3yV8TLqrFn9wf6FOCVg0

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

3.0

C2

well-environments.gl.at.ply.gg:2009

Mutex

jdMrVXEQOmAvlyTa

Attributes
  • Install_directory

    %Public%

  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8e85bf366a5a80073a728274b263bbfee1c81a7bccfd0876a20587b000a2766b
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections