Overview

overview

10

Static

static

10

Test.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Test.exe

  • Size

    68KB

  • MD5

    dc40adf87eaae4b769a7a79eb7f579da

  • SHA1

    95ebd5176a9a6fd75c0af88f60c14ee0693e78ef

  • SHA256

    cbc94d17b900f0cfe19b9447371f8a3603f7f690ceea27d8155cf0b8893e6128

  • SHA512

    c40484feece8252b8b4b515b59ec708006a9a2400d40f19c90d89c9cc5d03a34cdd64e81f8c435bf02079b6b6acc649db5063606d603c98dd9ae7bc3ff513f53

  • SSDEEP

    1536:UttVEsAzC7mse1J0yL+byUxwuA4KHIHk6t3KO/aI9/O:UFaCKRpL+byuwuA4QIT3KOiI9O

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:61186

21.ip.gl.ply.gg:61186
Attributes
  • Install_directory

    %ProgramData%

  • install_file

    svchost.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Test.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections