Overview

overview

10

Static

static

10

3ab61ee8a8...0N.exe

windows7-x64

10

3ab61ee8a8...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3ab61ee8a81099edddf87af587420a10N.exe

  • Size

    40KB

  • MD5

    3ab61ee8a81099edddf87af587420a10

  • SHA1

    d6c0f6f60d13cc786cf7ac0df2c45b5dc47b945c

  • SHA256

    feba3474a30f9b010741c34ee4773777fc329390418713ffef424b2eb9243a5f

  • SHA512

    f43326c79ea8bd118fd90efc8c2c8306e02901727ffd7c6666b2a35820eb8799976007f4886a68a7f411509ad61dcf7ddf5a3630fa5342014ad5aa978818ff3f

  • SSDEEP

    768:pNfPMSk3K/EzTb/008WuFZ4ZJF5PC9O9Fy68OMhi3/aV:nf05a/CTjp89IFc9Uc68OMsi

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

154.197.69.165:7000

Mutex

jcTVbnlMjCEJAYCp

Attributes
  • Install_directory

    %AppData%

  • install_file

    crss.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3ab61ee8a81099edddf87af587420a10N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections