Overview

overview

10

Static

static

10

df.exe

windows7-x64

10

df.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    df.exe

  • Size

    58KB

  • MD5

    b194de4adb59afb5c4392f8a56fe25c0

  • SHA1

    1f482bea8edc37c763901923d11adeda24946057

  • SHA256

    e1273e480ea564ccc1d037c9f47ee5a378aec0d196f434a3d99b687f547a83a9

  • SHA512

    687674f8f300c9352f8a35030307f433672749163cf43caece8bb7b46d3af9c22f9a93ff93b0c0e6fd74bbe4277527e9ffae10e581cf0b2551078d05521d49f8

  • SSDEEP

    768:Hv8jto5Hcw3xwKFYwqNxghTaFjMYnGLppEzJL5Ykbo8fBuzfAUkBvmL8QnhUcAVJ:HgFyT/nENMHLTUJmkbNfYTAB3POvDE

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

147.185.221.16:40164

147.185.221.20:40164
Attributes
  • install_file

    System Volume Information Prefetch.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • df.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections