Overview

overview

10

Static

static

10

1722924067...ed.exe

windows7-x64

10

1722924067...ed.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1722924067fc8318f8c090d562f8adb507b77f61b0e263d41a3f8345496434e8ddc0ef93fc559.dat-decoded.exe

  • Size

    39KB

  • MD5

    f0c26c9555c9414af344d284bcb7e0a2

  • SHA1

    b4c1ac2c7ebf20eb0b00f0101adbbaf9523f4997

  • SHA256

    b23b57a2f2668cdcae964bb464b1e8312f244c143123ab5d62bd1dba8ea078ac

  • SHA512

    5eb9f7808914821319b6f835dbc37267b68fd904a523f0ab0ffe855622d425954ff8f21a589436b35d3eb0caaa4f24c8690abad1202470b9ed6d4e7680daa9c0

  • SSDEEP

    768:XxGZOSN/3Qoub2qI7s4p1l4IHofeFv9WvO+hgq77:X8ZBu6d1lKmFv9WvO++G7

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

lisa22194141.duckdns.org:7000

Mutex

xyIsniB5c2bg0ZE4

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1722924067fc8318f8c090d562f8adb507b77f61b0e263d41a3f8345496434e8ddc0ef93fc559.dat-decoded.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections