Overview

overview

10

Static

static

10

9a18962ace...0N.exe

windows7-x64

10

9a18962ace...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9a18962acee9b5b7946b1425233581e0N.exe

  • Size

    85KB

  • MD5

    9a18962acee9b5b7946b1425233581e0

  • SHA1

    4f969b78f34af14278f8e422aacc26d203e5d427

  • SHA256

    f89ebc619ed93a97968f38959d4582b331b94aa748fd1123fc8276d805164a43

  • SHA512

    f574af01cdf46b382e9708a9b16fc8852b2d0e3689d07683f7dc552f14f1e072cc4ae4134747e301dec31a5381b344058c74f5fbcd1fe917623fbb60243527cf

  • SSDEEP

    1536:4mYiwWSj+jM1zw03EQ9+bqADgpnGQFKS416+O2GrkjQIzuvdS1EAd8IIU:4mjjfUj+bqADUhFDAO9AjQa4gEA6IIU

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

127.0.0.1:7000

149.22.84.163:7000
Attributes
  • Install_directory

    %ProgramData%

  • install_file

    Vlc.exe

  • telegram

    https://api.telegram.org/bot7319980603:AAFuzygI8cI8IS2VJgdLb0HfT3zr-_0GWFU

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9a18962acee9b5b7946b1425233581e0N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections