Overview

overview

10

Static

static

10

6f6e24f167...0N.exe

windows7-x64

10

6f6e24f167...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6f6e24f167776e5c75381ffd9526bea0N.exe

  • Size

    32KB

  • MD5

    6f6e24f167776e5c75381ffd9526bea0

  • SHA1

    9a478aaffc476ea64bce2d0971189dcb4809be65

  • SHA256

    a05fd06a142e64f40345a8f527426aa3dce6618236babd56ab9d153bdef256e6

  • SHA512

    867046ece9e1ff179c98e1f54ed0f3080ed621fb728d9ec3ff92a22d1a8563b5980f46cdca2c3af89b6e64f25dcaec93f27753f4cb9e80d52567f982df533a9d

  • SSDEEP

    384:BEbmX5Qa+vN1h1+X3v6JFjL+g93Tm2eaFOkOdRApkFTBLTsOZwpGd2v99IkuisDj:yVa+vNtg+PB93Tw4dOdVFE9jmOjhnbc

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

198.44.168.230:7000

Mutex

E2cmitlBdRQSsYdY

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6f6e24f167776e5c75381ffd9526bea0N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections