Overview

overview

10

Static

static

10

ad9745a30f...0N.exe

windows7-x64

10

ad9745a30f...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ad9745a30f0b4b8c8f09067b88273340N.exe

  • Size

    40KB

  • MD5

    ad9745a30f0b4b8c8f09067b88273340

  • SHA1

    c59b71dbbc1f735a2790ed9cecee9cf51856d7ef

  • SHA256

    842915fdc082ac2d547320c7911bfa28ba7fcdf41a7491575fd744bd879bdbf5

  • SHA512

    4ac714e805402362f819b0693c8d2538ecddf2d63e8e212dbd83dc82f5c77d0469e26464c28c0611b185aa2d521ef507261ed38c88ba9a6b489d331c9d42035b

  • SSDEEP

    768:SAy7yuCLGJaZr/8rMhSSYlwXDUDX+Wcv6zFPc9Y7Ophhg4bZB:SR7yutJaZXNe5SeFk9Y7Opc4bZB

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

wrong-km.gl.at.ply.gg:47024

Mutex

4pVBiqAFSAkWCIba

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ad9745a30f0b4b8c8f09067b88273340N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections