Overview

overview

10

Static

static

10

Wave+premi...XX.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Wave+premium+cracked+by+XXXDENISXXX.exe

  • Size

    73KB

  • MD5

    ba32f4d60d74382feafe3de044ee373f

  • SHA1

    0eb715230464ef645ca781348e568125255ea0d9

  • SHA256

    1d3c1a2bed78077e3458846a6f1cf94b037733154165dd78c0f95899b3fd9eda

  • SHA512

    1fe13731f237882cc3edf6a3bb3856ad7d50e99d63fe976e917f62e9db555e72e8e717335b208590f4736f5143f82585f3d726f8ead518db0098783258e39eff

  • SSDEEP

    1536:E0+fLx/nb8Nbrk09imEUxTZA3cRbJYEfLCOJYWI:QNbiDhEUTZtRbJx2OJy

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:7000

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Wave+premium+cracked+by+XXXDENISXXX.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections