Overview

overview

10

Static

static

10

sdsd (1).exe

windows7-x64

10

sdsd (1).exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    sdsd (1).exe

  • Size

    42KB

  • MD5

    77131893d1d6deaa0c9b4cc54e2a517c

  • SHA1

    7f4ec57d8eb0a42e97fa58cd6bd79d1ae30017a6

  • SHA256

    34ea7721b4bbd41bea0c41718e4d0526648ce1db87b3a479b2e6040e7f405562

  • SHA512

    7ee4ba592d2b7c8fe9f5e912daa3828e7f41640047f803b3f167138c9a0b878d5c565d6dd2df3b70de3eea0b2cb2208889f6e52092e10b49fc85d4978d44610a

  • SSDEEP

    768:ZPxbPfC8mN0rpyy5r8OC/NM0M05F3o9hEwO+h41L7dRs:ZPxbPaJN0UyiOxcFY9hzO+e13k

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

2.58.56.88:7000

Mutex

JCqsviPCeDOFTfE1

Attributes
  • Install_directory

    %AppData%

  • install_file

    microsoft.exe

  • telegram

    https://api.telegram.org/bot6748776206:AAEhhUNx0aGGcH_eEbjbmS7YdbGSRHXm-S4/sendMessage?chat_id=1314740060

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • sdsd (1).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections