Overview

overview

10

Static

static

10

a02b12e6a3...70.exe

windows7-x64

10

a02b12e6a3...70.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a02b12e6a3848148cf2ff394d0593c0532c57603f1a8fb74040e668284e33e70.exe

  • Size

    80KB

  • MD5

    a1880883ff14f58135fc2db22f46a8ac

  • SHA1

    cae4492fc961ef9cd08bcdbfd5b9b781f6458471

  • SHA256

    a02b12e6a3848148cf2ff394d0593c0532c57603f1a8fb74040e668284e33e70

  • SHA512

    873e325ed133bfb1b4954fe19578aaf778c074443b1087a5cce6b8e584a62ea94ec6c6554231e1793609a862339eb0665a31ba34e02d4d68b2043d3475c7726f

  • SSDEEP

    1536:hzNaDl//hUhNJ4tz9D5SXoHZ9bYSFwzDj6FVOb/R6leU25:hhCKTJi9QXo59bYsyDYOb/RZn

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

185.196.10.235:7000

<Xwormmm>:0720
Attributes
  • Install_directory

    %AppData%

  • install_file

    windefender.exe

  • telegram

    https://api.telegram.org/bot7028702028:AAEx2DgaoQW4ZJEFV04T7CiZMjpq2vEnODs/sendMessage?chat_id=6857243638

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a02b12e6a3848148cf2ff394d0593c0532c57603f1a8fb74040e668284e33e70.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections