Overview

overview

10

Static

static

10

5a82d2309f...0N.exe

windows7-x64

10

5a82d2309f...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5a82d2309ff6e94f3f9a53599149f890N.exe

  • Size

    63KB

  • MD5

    5a82d2309ff6e94f3f9a53599149f890

  • SHA1

    80f63c051b80cd7bcd69c098bab249aaf9b4e1b6

  • SHA256

    87aaf620d164ee71db6fdf32d9c910ec50f795c13738784bdea7b86c8b306439

  • SHA512

    ea8f740d44acf348e5ca4d5f3d9fea719aacff7b63350212d64b320c1a1051f11f93ddb010e9f626b2f46878197665d85b1d7fc7ad84971b35da6a2a4b12f37e

  • SSDEEP

    1536:wHls956Lcos7/xXtAW4+bws13LeuJQL68TOYqOHS:YLc/bxX29+b71iuyTOYBS

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

22.ip.gl.ply.gg:3061

Attributes
  • Install_directory

    %AppData%

  • install_file

    WindowsDefender.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5a82d2309ff6e94f3f9a53599149f890N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections