Overview

overview

10

Static

static

10

Azote_ExternalFN.exe

windows7-x64

10

Azote_ExternalFN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Azote_ExternalFN.exe

  • Size

    72KB

  • MD5

    f21484d35e6344357ce79572dd22eef7

  • SHA1

    2b2a2b6b7a94ffc6872b792047631b5dfb1591bb

  • SHA256

    77881e62d6db96943bd9459fa26b5aaacc7cd5d23dfa4e60253eeb4a644d3684

  • SHA512

    e8e1a045d4c5143d45c5cbad2b837be1d05f5f6927ef9c8c7440bd61ec8ca4874a6de5f58935a5d5e45ccec134b83085fa94db9dfe26e58b6d8d0704aa3078d9

  • SSDEEP

    1536:CnphxJltvcoGqg1vbY73/xK6kJO6VlEdWm:CpfLSoGJhbYiJOIlTm

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:7000

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Azote_ExternalFN.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections