Overview

overview

10

Static

static

10

test.exe

windows7-x64

10

test.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    test.exe

  • Size

    32KB

  • MD5

    06492ba17e331348088f989a954aa18a

  • SHA1

    da0b518a4f81f2f37bc17fa3c987ec1f06eb018b

  • SHA256

    029aa5e2133b7afa4be79e153285cbb50041b6411ac2f42c00eea9c270af9f99

  • SHA512

    9e683954429e0a930c153b024c40f93bf58a01fbe043e9dab4c3a27267564954d024756ee277099ecdefe41350397671435590cd3f0ec23eaf28e1aec4958dc3

  • SSDEEP

    768:IVa+vNtg+PBo3Tw4e1dVFE9jRnOjhQbK:CvNtgwo3U4epFE9jRnOjG2

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

192.168.200.176:8080

Mutex

FFSst8JtsY4Ivh5q

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • test.exe
    .exe windows:4 windows x86 arch:x86

    Password: 1223

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections