Overview

overview

10

Static

static

10

active.exe

windows7-x64

10

active.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    active.exe

  • Size

    60KB

  • MD5

    36f296bcdc8a9e2fe5da346621a02513

  • SHA1

    11f7f5080afc05501714c6f18d9ac926038c5e02

  • SHA256

    851880b6399adaa229d8bd2468caa1ab7317dba2fd2ce3ed3df4e41e19090ba8

  • SHA512

    bb93f62355dd31e2b95c5901b7081b26bb76043ecf857b58c49a8acede55c54e86e48b9b28b5e47caba9520c2729497c9e9bb1ef9c2bb511c17b9d064ec77d05

  • SSDEEP

    1536:9rFSGlgpSttSZ4+uXruU9ybw/2/dE6zOjmC4:5AmgpYYbGrvQbw/mROCf

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

projects-person.gl.at.ply.gg:15424

0xF488F3FA5541d79f0b1945ccA834cD6d939dD864:1
Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • active.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections