Overview

overview

10

Static

static

10

341d213ffb...40.exe

windows7-x64

10

341d213ffb...40.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    90b363f21821b35934eced9bd7ce2963.bin

  • Size

    70KB

  • MD5

    e8f9ec04ce371a05653806365e7170d0

  • SHA1

    0b3f97a5eb30cb97ce2aefd5b3c8eea9ce12de84

  • SHA256

    91ed4f07c3e5b2e0c7b5f00f003debc9adafe2cc5127fad969f4a309c85f0d8d

  • SHA512

    9cce16334fc0cf0fb1776598b9eb16b0e26a9f740e43c5e32d6a48252ed755356f6dd5b2d0312cee78424dd2c3069fb0c67106f3149757002b4b3b51171d590d

  • SSDEEP

    1536:ze2rmn1OAKzhp0odciZo/kOXQ/RSWrOak55kftnEPSq:i2S1OAK9p0oSjkRR9E5WKSq

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

84.38.132.25:7771

Attributes
  • Install_directory

    %AppData%

  • install_file

    ChromeHandler.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 90b363f21821b35934eced9bd7ce2963.bin
    .zip

    Password: infected

  • 341d213ffb340627b485a9d3b23d21464e95fc2bb437441559bf9173ce942640.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections