Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Update.exe

  • Size

    59KB

  • MD5

    9dc34718d314f7c50123221edce16c52

  • SHA1

    5e41b3629a432cc781671446eb842466bcff35f8

  • SHA256

    2e4e2708c98dd00a82f254907d68ced9ea596421247349862657fe6838d0c7c2

  • SHA512

    e0a156e76f073da3c2d5feccca201ea873e97458d466ce14723302ed27ecee3084fc95a8961c7992fb26bcd6acc420d4256a0ba47fa491bd0181020a327ed864

  • SSDEEP

    1536:wXEDgsn0abEjGQKjXXobKlyX5ww6oudOwYH:w0IBjOX4bKl066udOwYH

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

147.185.221.16:56793

Attributes
  • Install_directory

    %AppData%

  • install_file

    Update.exe

  • telegram

    https://api.telegram.org/bot7499501283:AAHzonur3KBpsnYSIAaCFbTJK5BxUpAiwg4/sendMessage?chat_id=6796218219

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Update.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections