Overview

overview

10

Static

static

10

test.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    test.exe

  • Size

    36KB

  • MD5

    9cffd37fa8bfb817c694b05f11830e5e

  • SHA1

    695345b7aee7cd23313bb4e17bf5107d41a1890a

  • SHA256

    bb2d2e315277df304252a7abd574c8ecb80b5bb88828dfe2aea3d2c23ad86daf

  • SHA512

    20012f341b0085aa1285e65dda729c4f9d6b0f561f38988ce14e5f6a5a86c278c2cc83bea020717ea074abb6d24f86e8289dcb23df5b8a8e2db956732ef0f03f

  • SSDEEP

    768:+TAe+S7N5t5NdhgOySeLFy79CYOjh2Py2v4:+gSbddhiFU9CYOjsv4

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

mode-clusters.gl.at.ply.gg:36304

Mutex

a5ja8J7AVLT3U4oI

Attributes
  • Install_directory

    %Userprofile%

  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • test.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections