Overview

overview

10

Static

static

10

windows.exe

windows7-x64

10

windows.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    windows.exe

  • Size

    81KB

  • MD5

    6b85f4f32901847ddb364a76c05e8ff2

  • SHA1

    bb0c183ed4058dbcb668e53522731137c73ed65d

  • SHA256

    4d65e0d64e2ba32d283b201627203e628dcfa3d7b8bea9e11cb2d90160cf9269

  • SHA512

    f2c836780dcbbfb8247a64d9b25ebea3b3d3e7464bd6dbddecfdb382d56193a8e3c533fc56a1974fce4468bbe3062085f675b13cbb5f8a93afc2e3e5ab323ccb

  • SSDEEP

    1536:bvrf+v7qS3SPwo8BUbw7/PjVVkAa6bYUO+OU151+r+x:brM3kLbw78AgUO+OUb1Xx

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:33346

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • windows.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections