Overview

overview

10

Static

static

10

celex.exe

windows10-2004-x64

10

celex.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    celex.exe

  • Size

    35KB

  • MD5

    f4cd6d927a2fbbf93bb74574e52d6d8d

  • SHA1

    d454128cc4545b7e0e1273215db75326711b7814

  • SHA256

    984a3172784f14a763105262f6d599fc15099d8caf4d26df55482a51903782b9

  • SHA512

    d051eb98bdb8ae144881d00313837e848359ae4b30f21c2f9adc877dc2701192ae875d675d31374975e472a0efd496b9d47832e75769229209d7a9bfb6e19135

  • SSDEEP

    768:IHv9ouQGVG0hiQfCYzseVFy+9FOOjhROE3:IHloqG0hVa6sUFf9FOOjR

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

192.168.1.109:7000

Mutex

jAZ3mldswT8N4qtA

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • celex.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections