Overview

overview

10

Static

static

10

abc123.exe

windows10-1703-x64

10

Resubmissions

10/08/2024, 08:04

240810-jybyfs1glp 10

10/08/2024, 07:41

240810-jh9jsavgng 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    abc123.exe

  • Size

    83KB

  • MD5

    0798a032d370abb2458879df8a21f705

  • SHA1

    95a5377e329928b082aac355dd3b2269b14587a1

  • SHA256

    d59be31a606192749c0cc0f10b44634ef7179879b35cf793b0dfba49a1cc26cf

  • SHA512

    6a97631532d3785936b5640f3f8e0fa8b08c3b0f890323f82c82e5c99111bec86b683668afa7676bf0e251e2e8823758c64aa7c1c289e83f79a2e08d2ca2ace0

  • SSDEEP

    1536:sGv5xf2AzeoV+vy+UrY45fb28flEzY/LT6kv2NOzXl3ZjJY1aoA:zxfnzadYY4pb28fP/LJv2NOz13ZlfoA

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

IrinaCalzadilla-37039.portmap.host:37039

Attributes
  • Install_directory

    %ProgramData%

  • install_file

    System32.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • abc123.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections