Overview

overview

10

Static

static

10

писка.exe

windows7-x64

10

писка.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    писка.exe

  • Size

    56KB

  • MD5

    1aa15ea368d39761814d3de754165e7d

  • SHA1

    8dbb32ba02f3924d338d491f6317ad965d57f0c2

  • SHA256

    4765b4d886a082fcf8f934c582e895476e837292820cc09edd307841eff9e1ad

  • SHA512

    e36df513e24696c1ea5be6776fa67912d3fe793bc96dcf00a2b4d861c67427746443134084faeb9504c61904b6e3bfa60b5dc8b1c9c2cfbd25e43f1115e40b82

  • SSDEEP

    1536:PsYPmeK7F1C8hp/hxtd3EukbH5jQfrHp6yjOhw:70vxX/hhUukbHqjOhw

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

147.185.221.21:48756

Attributes
  • Install_directory

    %AppData%

  • install_file

    svchost.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • писка.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections