Overview

overview

10

Static

static

10

JaZB.exe

windows7-x64

10

JaZB.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    JaZB.exe

  • Size

    36KB

  • MD5

    31db2491cba3b24e42fb27bb67d6be3e

  • SHA1

    a4d74772b326e070b0fe2a3af5587b4a6d0d1b89

  • SHA256

    83801c10dfd9aada475b4f508a08001a3ec93c92590bff2905b23c43e1f85179

  • SHA512

    8d45f62cc21d39ca7bf0eec2893b89ee166b5781948dfc4be9ff25aaa9c6b313f81a834be6f6dc771d2ec6360d9d09943247703fb02bf02dd2c0bd86d5c979e3

  • SSDEEP

    768:AQ2A5Unv1+tybbHMbASaKyYbFf9kHBPOMhp3LPN:p2A5Unv1+oHHqgKyQFf9kHBPOMLTN

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

10.0.2.15:5555

Mutex

oTvGxMWEbBmZIJr7

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaZB.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections