Overview

overview

10

Static

static

10

fein.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    fein.exe

  • Size

    73KB

  • MD5

    580632b903c595e7906ae40fd1afe98e

  • SHA1

    4dcb6f29d6bc4c3b4f62be261b78c9fcadbc30c7

  • SHA256

    3a10883f64280ee95cf3a1c0d8815461b7cca03e88271b1d658f9c03b4b8f75a

  • SHA512

    3db890e999066e26d027a85388f28dabb957d56b007f57b162b5774555a000a681176676ef619284ea7ee55d5e9b196fe30aa2117e6683a20670bd5fe9c8494f

  • SSDEEP

    1536:w/hTG6TFVmZaX94mvhTvp0fLfb9/eG4hw9Vfwc56BoOzJwQn2:w/hrFYZFYGfLfbdeG4oNHOlwO2

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

web-yukon.gl.at.ply.gg:17223

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fein.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections