Overview

overview

10

Static

static

10

dd084eace8...48.exe

windows7-x64

10

dd084eace8...48.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dd084eace8def7ec82b68be818d0ddaba7ba14752679dbbdc5d8af4c1fc9d948

  • Size

    68KB

  • MD5

    dc09aad6c4769d9368f8fa4122091f6c

  • SHA1

    f39bd3c6bc1ff8d46f8abc9dd8f1205e52162448

  • SHA256

    dd084eace8def7ec82b68be818d0ddaba7ba14752679dbbdc5d8af4c1fc9d948

  • SHA512

    09d868e0d08e38d1d69e4e43d53f0ebf5e86a9f95528b095a32234e99b12135fa831919eae37ce17a671c02ea6665ff6187e1b560e0291d094fabbb4df782021

  • SSDEEP

    1536:7G4OjORI6NHEv9Q6aY9I+b5mtRQs6h6RF6zOtqIwaj:/O0dN4tF9I+b5wRAO8IPj

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

  • pastebin_url

    https://pastebin.com/raw/RpncwxSs

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dd084eace8def7ec82b68be818d0ddaba7ba14752679dbbdc5d8af4c1fc9d948
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections