Overview

overview

10

Static

static

10

5c2fbbf8ce...0N.exe

windows7-x64

10

5c2fbbf8ce...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5c2fbbf8cee52eb848348599f2563690N.exe

  • Size

    37KB

  • MD5

    5c2fbbf8cee52eb848348599f2563690

  • SHA1

    6ea422e82eed8faf04fcb630abb4291eb6419a40

  • SHA256

    86ad299146665ba3f6f5d8a58ffe9c4b8c1931b1ca4d7a4fe66a95b720af4fa5

  • SHA512

    d8d46fb54f382a5341f41bb9c174cdae2b2db7abaaf8f7b8b986483cf654f2a616dae87fcad5aaee00144a01e3e4333b89a9a604e8a7bc30bfbede2a36ac678e

  • SSDEEP

    768:u6QKOtIRusgCC/Fm4xauXFyl9O96c6dOjhyDNG/:u6cGRsCCNtxdFQ9c36dOjL/

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

very-aug.gl.at.ply.gg:22278:22278

Mutex

Z8jYH5j0wzl1lMDF

Attributes
  • Install_directory

    %AppData%

  • install_file

    visualstudio.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5c2fbbf8cee52eb848348599f2563690N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections