Overview

overview

10

Static

static

10

14aa3f7639...31.exe

windows7-x64

10

14aa3f7639...31.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    14aa3f76393eeeec3740bff9ba03d3664ab5e4a7265eeda9d2c7da2663d8e331

  • Size

    317KB

  • MD5

    32f2cb995ad0a140911dc6961b293a3d

  • SHA1

    67b6ac08bcde5e2ec264e361875293347f5e575a

  • SHA256

    14aa3f76393eeeec3740bff9ba03d3664ab5e4a7265eeda9d2c7da2663d8e331

  • SHA512

    52b44be825e3e7af3bf36f885091ce4a386cccac79a308f4bb3be378de7be6b628d615ac675e18722470e964a6289f11b93f19b061e35524b12080264931162b

  • SSDEEP

    6144:M6HCb/+GIIIIIIIhIIIIIIIIIIIIIIIU:M6

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:36929

21.ip.gl.ply.gg:36929

policy-animated.gl.at.ply.gg:36929

123123123qqqqqqq-36929.portmap.host:36929
Attributes
  • Install_directory

    %AppData%

  • install_file

    svchost.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 14aa3f76393eeeec3740bff9ba03d3664ab5e4a7265eeda9d2c7da2663d8e331
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections