Overview

overview

10

Static

static

10

1727269807...11.exe

windows7-x64

10

1727269807...11.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1727269807db8b68b2c9b1c9bdd42030655a5e439e971ba77503b2390bf7da0c0928072d74511.dat-decoded

  • Size

    32KB

  • MD5

    5e460456a6586d424dde3b82365f6113

  • SHA1

    a7930e9c81dc7afdb0fb597f6be3d5e7a8275538

  • SHA256

    f19f39a1030833ec381965932d4e3a827264130e622dd4da2bdad7d98f36764a

  • SHA512

    265f8aabe0c18c8d903493cae22779c10f3c486084f598b776d2200a382a855e15fa507af5e38cdd5f9b935eec4bd7d636dfbdb405713c24ecd51702ac90ea32

  • SSDEEP

    768:TVa+vNtg+PBy3Tw4e1dVFE9j/OjhJfbk:zvNtgwy3U4epFE9j/OjTA

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

135.224.23.113:5555

Mutex

mR0UgXYus56nykvx

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1727269807db8b68b2c9b1c9bdd42030655a5e439e971ba77503b2390bf7da0c0928072d74511.dat-decoded
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections