Overview

overview

10

Static

static

10

134727ccc6...d9.exe

windows7-x64

10

134727ccc6...d9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    134727ccc6d70bc88ac28f2605b977210271d276b0fd1c3e5f949ac486946dd9

  • Size

    35KB

  • MD5

    29d58f52ff50b814eb6dfc8094183021

  • SHA1

    21a8d5f21d7d6fe99f4feae0e2b2fb6994482618

  • SHA256

    134727ccc6d70bc88ac28f2605b977210271d276b0fd1c3e5f949ac486946dd9

  • SHA512

    71d119689263d996a0d36c802f0582efc8ff5914d2d3a9434a2b599c1eefc98aa8c6d746261012ac5285bf091f5e4a489127b734c02f551c4b78654dcafdb46d

  • SSDEEP

    768:sQChvN3L+tD/QrcLUsvW6sTFya9C9OjhyPS/al/v:sQse30FF9C9OjcialH

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

session-chief.gl.at.ply.gg:36125

Mutex

uTQCpxYcymYU4yaB

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 134727ccc6d70bc88ac28f2605b977210271d276b0fd1c3e5f949ac486946dd9
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections