Overview

overview

10

Static

static

10

testing.exe

windows10-1703-x64

10

testing.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    testing.exe

  • Size

    52KB

  • MD5

    a7bbb28074e4470f925d5e0511df34d6

  • SHA1

    c321701f493cf22e53b8847a3908974b5dc316f2

  • SHA256

    2f4748c86c1842b675aa555b7e1ec6775b5a395ef70dbb435756ebe5ea5a0620

  • SHA512

    05bffa81b8944ac0932fbcd585869d18796de4494f423c7914d8ed1de9c019d76ea504fd721fd934f59fee4f0be69df715904e92e724c0f875e3fe62d4c0b2f8

  • SSDEEP

    1536:ScJ9IXXN9pZuNVNTRN1FDdkb2NgtOvOOZef:SEcXHahf1FDdkb2+tOmOZ8

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

web-yukon.gl.at.ply.gg:5234

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • testing.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections