Overview

overview

10

Static

static

10

XWor22m.exe

windows7-x64

10

XWor22m.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XWor22m.exe

  • Size

    41KB

  • MD5

    e2bc9a3fb83b45c8242b5446c97d947e

  • SHA1

    9a0fab4d50259c88adf219fc48e526b11d40acc4

  • SHA256

    5e9c87e34dffc6958761dd58bbdecc373a4810c82ab22d356a7718233c5f9a6a

  • SHA512

    fdcf93133e09406eba189be9c0780cdc2cc6ec167088421755c2767dabd9dfda49cefe9e686e429eea4571d6f9e32fc1abd311ef8e10cc08a51a6297f29cb7e1

  • SSDEEP

    768:+ibiQ5akhwT5T3u1Swk9lYAT96KdQ9jGXzZRBTO:+WzwTlcSnYK1Q9yFnTO

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

192.168.200.176:8080

Mutex

utFFFnRU6mmgahMH

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XWor22m.exe
    .exe windows:4 windows x86 arch:x86

    Password: 123

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections