Overview

overview

10

Static

static

10

0a637d1dde...0N.exe

windows7-x64

10

0a637d1dde...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0a637d1dde4fcb9d568719b4944187b0N.exe

  • Size

    112KB

  • MD5

    0a637d1dde4fcb9d568719b4944187b0

  • SHA1

    6f185cc1923e3963815b2ab043401db82e2eb531

  • SHA256

    8ede337dbec011d1b31e8ef768d36fa446b0152d05d9e544333fed9b34fabba0

  • SHA512

    b6d05b1b80bac0382572bd2bf2d74d45208910ca2f28a201299c7c0be749c6613ec32738d724d2f905f43dc25e7ac7a65cd14f6249dc6dd6ba9b5eb1645b68c7

  • SSDEEP

    3072:4etnLE3TbjRFzOHGE/ODTssqNjqJbIuXkC:4BTbNEGHsTBqdvk

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:7000

185.84.160.182:7000
Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0a637d1dde4fcb9d568719b4944187b0N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections