Overview

overview

10

Static

static

10

permm.exe

windows7-x64

10

permm.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    permm.exe

  • Size

    69KB

  • MD5

    0290fa60e07938ea38a92844e8b6ef88

  • SHA1

    545664ee29c808241e2a6b065a571ad30d9a34f3

  • SHA256

    a31ac227f249e8a4d6cb1cc36f93c924ead247f7286fe3a9d4137c0b1825c788

  • SHA512

    ae32c3792b33ee6ed51b34f7a9053c96a3a8f5d434b0abc4b4910c149d855a8c02321f457ed7225eecf719d2409ad22be9f7f88aff8f2a48fa825883f1fe7757

  • SSDEEP

    1536:AzNMq6O8KS1pCRzAEDjCbd/WRfoU9exr26vxuO8Cq1v:AaUZR8AObd/DJtuOnOv

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

147.185.221.22:1194

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • permm.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections