Overview

overview

10

Static

static

10

2024-08-28...ar.exe

windows7-x64

10

2024-08-28...ar.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-08-28_2599b7f1f17461be8a9bbe48fdc09962_hiddentear

  • Size

    308KB

  • MD5

    2599b7f1f17461be8a9bbe48fdc09962

  • SHA1

    21cbd2c4b33b02d86affb2e66b4e0b50f4bb12e9

  • SHA256

    f9aba8647ab6d32967c7d16773b77a9b9a9136bd9d3ceabe31fd4d5d3ac204e4

  • SHA512

    d3e0bee8bf6e4e206b3743fad85649e7bf9964d4e3efa9561878129dbc74afcc6625ccc186227513d0103cd5f2a9326aae34788a0b98ae8e61c8c5884fdf9522

  • SSDEEP

    3072:pBrjWFP9ZmO/OiM+lmsolAIrRuw+mqv9j1MWLQI8qJzrrtRJlhkg9V6tuAxdLfww:pBPoP9Ah+lDAADr9fjqtspmd8XCa1c

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

193.26.115.92:7000

Mutex

tQVOItr2kWmDvohV

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-08-28_2599b7f1f17461be8a9bbe48fdc09962_hiddentear
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections