Overview

overview

10

Static

static

10

53kh.exe

windows7-x64

10

53kh.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    53kh.exe

  • Size

    30KB

  • MD5

    d505ac87bf4bd6dbf8cb9c17d322e0b9

  • SHA1

    23f4475d116aa4943bb36ad37e325eba3c47643d

  • SHA256

    1a7c9e18f44d03bfcb478c06f28845b36c3592c310e3fcc1179f6ad0094563fe

  • SHA512

    8695193b13c1c3550caa3a5c684eaa6fc3ff31fd9157b2918eb1aaac419b121d414e3df2658b39356735d23a873aed6b3b6f246c29d26153802b8a55ad16510f

  • SSDEEP

    384:zmcLVL5gzfHi47uQWvD4QLZubE70hYACSqReAw2uRugtFuBLTIOZw/WVnvn9IkV6:d1+i4UDzn7MYAoReJ2uBFE9RiOqhTbN

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

3.1

C2

someone-entering.gl.at.ply.gg :17987

Mutex

TvrGTkm0IqSq3UgO

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 53kh.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections