Overview

overview

10

Static

static

10

b17a54bdfc...1b.exe

windows7-x64

10

b17a54bdfc...1b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b17a54bdfc1e68c4cdc6ce9fea908f77b765c89987b3fc0da29a41bd46849b1b.exe

  • Size

    54KB

  • MD5

    8890295834fee9bad1bdf144ecf7509e

  • SHA1

    8979f0868013bdaf9fcb0a2a24a9e18543dbef7d

  • SHA256

    b17a54bdfc1e68c4cdc6ce9fea908f77b765c89987b3fc0da29a41bd46849b1b

  • SHA512

    da5f272c8f18999463976e35bb030ad71d94f8963f69638152833c49bf0454d9fe1e9e65b3035df47b02b9b9da4ff65efebe57ce64a5c018a99c033dc61a08ed

  • SSDEEP

    1536:qaNDHoGOCSQF6K+P6Cdjkbf74p6KQ51OvO6On0U:VNDHb4kbfaO6On0U

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

testloggbot23-37268.portmap.host:37268

Attributes
  • Install_directory

    %Userprofile%

  • install_file

    2lz.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b17a54bdfc1e68c4cdc6ce9fea908f77b765c89987b3fc0da29a41bd46849b1b.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections