Overview

overview

10

Static

static

10

nvcontainer.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    nvcontainer.exe

  • Size

    185KB

  • MD5

    b981bb2dfe12f5e245ff93028ab78803

  • SHA1

    da1bad9d6774c65c446d2731a52d095453333e6c

  • SHA256

    1da044f298319bed3642f35f4be612ef5ed4c7d3a8c64c0334f414187e33c062

  • SHA512

    cac08e14b38d7121756a62cdfd8e1aed570ec367a1edebdcf57386b8a824013b9c2b712b586739d008a95491ff5ebe3bf1ca0b48a2275188584f3e4d3ca5cb53

  • SSDEEP

    3072:4x4hyMH5DGoOpbpdTM96OgCuO/HaCYHNX:3D1OpbpWhR/VYt

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

3.1

C2

31.173.170.243:7777

Attributes
  • Install_directory

    %ProgramData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • nvcontainer.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections