Overview

overview

10

Static

static

10

1.exe

windows7-x64

10

1.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1.exe

  • Size

    65KB

  • MD5

    52b841d9e960fc8bf48eae7cc83295bc

  • SHA1

    2fd9e7f492d3896c844ef817ac5bae4ebb58f883

  • SHA256

    344485402cdf1b57586cf0fd22588bebe6dd70c49317de591039f52acdb2bcf4

  • SHA512

    e2fddc1dd851cb604f62ddfa52ce2a5bb2a239c0e0f826a30fcce6d24a18eea14018a503f3b87f38d5e697e876d54d4a5d09e54718ca8e0a258c5dc4367ad07f

  • SSDEEP

    1536:1AMN3vO0vu9OdURZe9UQq7rkbXlL8Hg+TOESYg+:NN3vjUe9Ul7rkbXlQHg+TOEng+

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

23.243.100.240:1515

Attributes
  • Install_directory

    %Userprofile%

  • install_file

    Windows Defender.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections