Overview

overview

10

Static

static

10

b986187bf3...7a.exe

windows7-x64

10

b986187bf3...7a.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b986187bf39b59dd481c73a77501c67bb7129c44cb3f043b5b19e5bdba50067a.exe

  • Size

    42KB

  • MD5

    46f57e4388ba21cc150fa238593da42c

  • SHA1

    0527c3305a7dd582147c3704cfa268cc5481202b

  • SHA256

    b986187bf39b59dd481c73a77501c67bb7129c44cb3f043b5b19e5bdba50067a

  • SHA512

    097e758b5a50aad0ad1a9c453dbecee069acb90b42815c926c698d2fade2d4eccc23a387549618549db56c28f3b9bed3484ef30ce8f2c1e4763ec43891d00e88

  • SSDEEP

    768:WmrJDweBDuOkScrbsN/x6iqCAr43MyfJF5Pa9p+f6iOwhy3/ibQU:W0DwewicrbsN/YBRr2RF49If6iOwg6J

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

outdoor-tu.gl.at.ply.gg:58102

Mutex

eGCOlpPQSPbAEpti

Attributes
  • Install_directory

    %AppData%

  • install_file

    svchost.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b986187bf39b59dd481c73a77501c67bb7129c44cb3f043b5b19e5bdba50067a.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections