Overview

overview

10

Static

static

10

645697f87e...3b.exe

windows7-x64

10

645697f87e...3b.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8ac3d32ddd136180b75c36a39398f39f.bin

  • Size

    51KB

  • MD5

    fd8f4cb61f06cbb4a6470d0f3ec3fb49

  • SHA1

    cce7d8475e0dd74eee8eda5598f07b2afb9fea91

  • SHA256

    a2c3e5f9a0ed696a2bdfcb07bff0d96e8d8fa95cb85488bcaba97162cd16ff7a

  • SHA512

    347215bf5f993af57a860ad4734206da52900a107b0cdd82def9e166c179210c5c0f3d886f8b258ec98fb1b2376eee0a153af8f1483d87e9fc797ae1d79a2b62

  • SSDEEP

    1536:/gLUPtYg3rWLFLdiM3mkzw1KLHkDCkgUTaMci48k:/gYORBUlkzGKzkvgUTahiJk

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

22.ip.gl.ply.gg:14520

Attributes
  • Install_directory

    %AppData%

  • install_file

    sv_chost.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8ac3d32ddd136180b75c36a39398f39f.bin
    .zip

    Password: infected

  • 645697f87e53786ed389243b7c493452d1f4dde157741bbe27d31f4bd87f833b.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections