Overview

overview

10

Static

static

10

tset2.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    tset2.exe

  • Size

    72KB

  • MD5

    9f4eeee9bf5c440412b3ebb77af41837

  • SHA1

    76e9d918c0febb09ce659bcfb8127fbc1ed45c3b

  • SHA256

    f9e8c31dc92d5138e8a328450b62536f98dcdf3096b1cf7d092771dd91fc28fd

  • SHA512

    82f452835531813294e1070f5592eb14b2892d507c251038fba5a21d61fe54e2821792005f3e360005ea66bc797cd3196794a1216fcbd749c4f3234cb70c8c73

  • SSDEEP

    1536:5xnmvlbcYBBS5/T1Vtm7R3JbKw4gCZQTeeNOVPKq:5xmBBS5r1VUxJba1QqeNOVPn

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

authors-reflections.gl.at.ply.gg:19578

Attributes
  • Install_directory

    %ProgramData%

  • install_file

    google.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • tset2.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections