Overview

overview

10

Static

static

10

Setup.exe

windows7-x64

10

Setup.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Setup.exe

  • Size

    167KB

  • MD5

    40c9aa0feb75f8b09d8f51c4c388f055

  • SHA1

    fcf4d55c7c7aa9223ff326b5b048be065d4a07d5

  • SHA256

    510827aff54bb00cdeb9ae483498411e7620db47422f5fac353bda3a44143c50

  • SHA512

    0c64d177f1316a2b230fd7944c4806a9f268b7922d13a8bbd6c8ff6d53054a29ffe8cbc8e7beed01e89d697fda3ce6d6ea7b1c1850ebdc698a38038a99961589

  • SSDEEP

    3072:S11wmhvbD0v8k7pOzRCBz65/M6If+3Js+3JFkKeTni:SfPvbFRCxBt25

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

stop-identifying.gl.at.ply.gg:1307

Attributes
  • Install_directory

    %Temp%

  • install_file

    svhost.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Setup.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections