Overview

overview

10

Static

static

10

4fb7ebce97...aN.exe

windows7-x64

10

4fb7ebce97...aN.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4fb7ebce979a2539e458afdce1eb6bd6efc4ef61f0c853fdf43c89997f5e34baN.exe

  • Size

    40KB

  • MD5

    e7587ba8e63a1e760ee3dc12951d53b0

  • SHA1

    fca801cc64f73aeeba945adb6bc048d81676789c

  • SHA256

    4fb7ebce979a2539e458afdce1eb6bd6efc4ef61f0c853fdf43c89997f5e34ba

  • SHA512

    7277e9f69fa1ccfbf42aafee6f0f03b5d454f95178e7a464c13a24e42df08def9413d3e3f38f526a1ad0147fcc52de421e841a668fb11236ea4c46538388b90e

  • SSDEEP

    768:HNfPMSk3K/EzTb/UN8WuFZ4tJF5PC9O9g68OMh63/am:tf05a/CTjo898Fc9Ug68OMUt

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

45.141.26.197:7000

Mutex

0aD510CrM4yzhpwR

Attributes
  • Install_directory

    %Temp%

  • install_file

    XClient.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4fb7ebce979a2539e458afdce1eb6bd6efc4ef61f0c853fdf43c89997f5e34baN.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections