Overview

overview

10

Static

static

10

2024-10-12...ar.exe

windows7-x64

10

2024-10-12...ar.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-10-12_4ebb32a47841ad130e28ffc250431ed9_hiddentear

  • Size

    130KB

  • MD5

    4ebb32a47841ad130e28ffc250431ed9

  • SHA1

    4538694b94fa6a44f7ba7a488ca69fd50fe35517

  • SHA256

    d4d58f8a432f4376b87e9e0ad1c1d19c9f4b43ad5559e55db900389eeaf12315

  • SHA512

    e30fd0a0afd00c00b5472ad05ae47926c4e69dac07de53605b71a7a35362b64dc92751ffe8ce4858b7e8f5ebf624bf8a36e6d5e2d46621f5b7e650449f483ff9

  • SSDEEP

    3072:YvNY/pFE9jLOjdM+lmsolAIrRuw+mqv9j1MWLQI:k8E97+lDAA

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

147.185.221.22:25435

Mutex

ED54LNUE65CRusCK

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-10-12_4ebb32a47841ad130e28ffc250431ed9_hiddentear
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections