General

  • Target

    1.exe

  • Size

    68KB

  • MD5

    8f92624441f23679bc48c7b610e291d5

  • SHA1

    a3501cae18717a857ef70d0ba13ff1071b18b823

  • SHA256

    c009c1d55550f5eb5bea14ffe0b139f9e0e474726c6517833fd4b55a4407ae52

  • SHA512

    d902a1171960c88f22862d9dcaa15a8e78f2bd4c58fc15fb8fd22207825db3a5f96fe03c9376950f2e6bb0c65724e398ff27882ebf120a99bad8b69de87903fc

  • SSDEEP

    1536:/RUuIw7EoZYzjHeMdYisEY8pR7K2Ob8r5anaNM6RVloWO57r5f:J5lMKER7vOb8rXNHVFO57r5f

Score
10/10

Malware Config

Extracted

Family

xworm

C2

31.208.113.236:15727

147.185.221.16:15727

Attributes
  • Install_directory

    %AppData%

  • install_file

    test61.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections