Overview

overview

10

Static

static

10

Perm.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Perm.exe

  • Size

    276KB

  • MD5

    5ab1e573561e0605d1535be042dba7f6

  • SHA1

    dc9eb01c5218912b2c80925133fc473c6e8b0557

  • SHA256

    3dde08907e65ec9f83c9446e59eebe1dffa6724a244a951ea39c4a571861dae4

  • SHA512

    2cb86414f4c1e8116b992aa85c58d2531d2e0eb5abc691dd5801f14a1b178dc52dbe3eed34e5f2f3f2ffe4a6f8bd4e490fc5a9071de0bd2c9d5dc19d418f8c66

  • SSDEEP

    6144:3ioZIt1bH9Kgmr6uzzzzdhXV57nWo2RBvQ6VZpZPe:TKr9KgAlhXVdWz2YfU

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:46540

147.185.221.22:46540
Attributes
  • Install_directory

    %AppData%

  • install_file

    perm.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Perm.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections