Overview

overview

10

Static

static

10

c04d1778bc...0N.exe

windows7-x64

10

c04d1778bc...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c04d1778bc4e03fe765ef7c782d08930N

  • Size

    39KB

  • MD5

    c04d1778bc4e03fe765ef7c782d08930

  • SHA1

    6a686af1256a769102d69e15ac1d92b799365124

  • SHA256

    4c7f8073c764f7c2ff3383a3ca6f24af3287e3c1c103d30e8206f360d6f27c64

  • SHA512

    5fb13ed196f13f4e8e0516e59d680eb9d745c20f31c566c0cab0dcee65dd4100d7d3f1782deec8fe37cc6f23bbc4c26f698cffb974281f9dc142ea4083927bdc

  • SSDEEP

    768:Vcf2dBLv6XR06ERDPiKuukR7LX4TfFWPt92S46cOMh1aB4:VcGRv6hfERbiKuumnaFe92S46cOMDb

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

127.0.0.1:19485

0.tcp.eu.ngrok.io:19485

2.tcp.eu.ngrok.io:19485
Mutex

JwzrRltWSmAH0pxT

Attributes
  • Install_directory

    %AppData%

  • install_file

    Xworld.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c04d1778bc4e03fe765ef7c782d08930N
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections