Overview

overview

10

Static

static

10

92c972993f...30.exe

windows7-x64

10

92c972993f...30.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    92c972993f4114134dab2af2395dbbf5633428fa6bfc264f2b24531a1a7bc230.exe

  • Size

    41KB

  • MD5

    26c4381ebee3429ac4bf84cda8eb3ded

  • SHA1

    57e2f5ce93f103cc143a99ba262e2f1bb3c8a96a

  • SHA256

    92c972993f4114134dab2af2395dbbf5633428fa6bfc264f2b24531a1a7bc230

  • SHA512

    c54724e0a8381300d3995ff13e4cc7ef8a997ec8271f2f1dc861ea41879215a495de41999922ea367f3d320ca9ce8a83f893ba4a5b186f81d0c7370d45836b7b

  • SSDEEP

    768:XKjSON6U+0VT7OWCCKUS0BMRSJF5Pa9pmwd6vOwhR23/uzZ:XgStUJVTa1nFrCF49Awd6vOwym1

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

45.141.26.180:7000

Mutex

DzHbxsgqPWTSgS7Z

Attributes
  • Install_directory

    %AppData%

  • install_file

    Update.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 92c972993f4114134dab2af2395dbbf5633428fa6bfc264f2b24531a1a7bc230.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections