Overview

overview

10

Static

static

10

20d1bcb550...af.exe

windows7-x64

10

20d1bcb550...af.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    20d1bcb55070399d86dc0e0d5e599f65964e69329149743d5be11e2820580eaf

  • Size

    62KB

  • MD5

    af0c3a431e9b201affa69800f4c9b467

  • SHA1

    44e4b88134ee271322ba6487b15203d8a19a1946

  • SHA256

    20d1bcb55070399d86dc0e0d5e599f65964e69329149743d5be11e2820580eaf

  • SHA512

    2230664460c9fe5d281af0e3f9ed6cbf5564a0caafd67dfda9b223bbdabb13525fe5cdc37fbd14e41b76037e08d93e497618cafcc457cefcd3df9b367b15f849

  • SSDEEP

    1536:CpPOMRDpck7zxP2Fss5+b+WACjr1/9x8OrRhMc:cP7RfM+b+W/1/kOrRec

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

0.tcp.in.ngrok.io:1488

Attributes
  • Install_directory

    %AppData%

  • install_file

    svсhost.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 20d1bcb55070399d86dc0e0d5e599f65964e69329149743d5be11e2820580eaf
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections