Overview

overview

10

Static

static

10

1c8384989f...0N.exe

windows7-x64

10

1c8384989f...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1c8384989fd7a499508c75b0aef644a1e494028183dfdcbd73cf2b21bdc34a50N

  • Size

    105KB

  • MD5

    2251b9b09ae99ef4bd7ae9b0cf831b90

  • SHA1

    0dfc2a1b0d8ce14bc4eea868faa066bc4504e9b3

  • SHA256

    1c8384989fd7a499508c75b0aef644a1e494028183dfdcbd73cf2b21bdc34a50

  • SHA512

    be8e9d5d7f14d8a23200e5a62d8141e875f3bf6c7f74f6db7d83f6c55802269bcdcce932eed8a63ea6a8b46dc5480befe87aeddc10a5c67422731ad7f841e0bd

  • SSDEEP

    3072:RzhVz4DpuBrV4pdIwqbC7LOOmA8F1UjZ:RzPz4DEB54pdbqbm6U

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

natural-processor.gl.at.ply.gg:52897

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1c8384989fd7a499508c75b0aef644a1e494028183dfdcbd73cf2b21bdc34a50N
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections