Overview

overview

10

Static

static

10

MapperBack...st.exe

windows7-x64

10

MapperBack...st.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    MapperBackgroundHost.exe

  • Size

    68KB

  • MD5

    be234affb6a450d9ba70e2077b92170f

  • SHA1

    a72a0f9b501867b8f3d3ba1dd19ddedc87f83a3e

  • SHA256

    676805b81537a671b519cd597f2ec95ecc896494499cfc9379fc9dcd1b0b6c78

  • SHA512

    77b9ac2f1301da866bcd798e8dc3353f436b858ed4312b25afada7b3fa607e45438c0782e8d63d65172ca0b8bc9a662e077ad1726aa6c1c04f4528bb538ffde3

  • SSDEEP

    1536:OwxnJg54Z7i6SWMivyrfNGBytkbxaezAIdNAB0OOz6T:1xnJg54Z7YWMYyDNUakbxFFGB0Og6T

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Attributes
  • Install_directory

    %AppData%

  • install_file

    Windows Defender.exe

  • pastebin_url

    https://pastebin.com/raw/a20MRrpD

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • MapperBackgroundHost.exe
    .exe windows:4 windows x86 arch:x86

    Password: 435dfs

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections