Overview

overview

10

Static

static

10

WindowsStartUp.exe

windows7-x64

10

WindowsStartUp.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    WindowsStartUp.exe

  • Size

    76KB

  • MD5

    ff496f039a1b48b510b12c97a959dd8d

  • SHA1

    b7acb8a2525cf8ac34e1c8f60f8582ebbe740fd2

  • SHA256

    a72f7b824c23a635a0abec3fd6b0572d04697fc8bf58bccfa5f963855d3e6402

  • SHA512

    8f13c238915c9d3c93485b59a05cea7419ff48a9bcb37359e2b1a416b8ef9c4ba17e5a9ace8028640f2ebfededbb54170893f44701b2b61d91a3051f7557b416

  • SSDEEP

    1536:VzucnLi2I9Uc8qJss2bWnShnNKZOcX+qBquq5U:1ucenUcnp2bQSdQZO09kU

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

3.1

C2

true-foot.gl.at.ply.gg :7416

Attributes
  • Install_directory

    %LocalAppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • WindowsStartUp.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections