Overview

overview

10

Static

static

10

Decor.exe

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Decor.exe

  • Size

    163KB

  • MD5

    18563e04e73d2791d5d1b440cfe9b6ea

  • SHA1

    5a73ea9c340c804506a8516b8497334156867e6f

  • SHA256

    de565ad2a9ec6169ce97d0929809493440edb6336a0c29a74893c473150bc2b1

  • SHA512

    4dc07b99c51c508098b4f9611285ca48a06de2549a067875a34c82bf996f33cc617c0d6881c130b3786ba65cbbdbae58a830d1e4fae3deecdaad813c3e6e8f05

  • SSDEEP

    3072:vuTQIeeYw0ykobkQbOOJ0fBz65/M6If+3Js+3JFkKeTnl:vukC0BobAfxBt25

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:39008

194.59.30.11:39008
Attributes
  • Install_directory

    %AppData%

  • install_file

    Update.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Decor.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections