Overview

overview

10

Static

static

10

WaveInstaller(2).exe

windows7-x64

10

WaveInstaller(2).exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    WaveInstaller(2).exe

  • Size

    74KB

  • MD5

    5d07426762cfa9847ef5be8e8beda7be

  • SHA1

    ed3e1591e6e9162a612679c77703bf9560fe1ec2

  • SHA256

    279c30e9501d45af1a1af27a2603589763a07cc8fccc7cf9373c068ebbf2a416

  • SHA512

    fabf63ed1732aa1f5e860bbffb8fe4b3be51ecbe73d57ff60473be3efcf2208fdbf81afae9d6d194d060cb58eb6be594a2af34d1a467486642bf7dc59b830dbc

  • SSDEEP

    1536:fvC+2gzgnhWuf7ihjzSbmhR0y6IjYOEcD8PFc:fvVgnpfGhjzSbmHknOEcDic

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:1900

192.168.1.61:1900
Attributes
  • Install_directory

    %Temp%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • WaveInstaller(2).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections