Overview

overview

10

Static

static

10

Windows.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Windows.exe

  • Size

    78KB

  • MD5

    52b334daf026c1ab82f2ff0242c54792

  • SHA1

    0823fd71da8c8054bae33f19283eafeb9486a018

  • SHA256

    cfe8b118764fc5f6c396066a7367ea676c423cd2a35a52084c256c93cb91b670

  • SHA512

    58d2bdbfef97a3f0451de56ea8a25d0a4bfdcfc3f8ca45c65bcd75b973d666b9961725494898c6f25d12d3c1c61858d5b0d4fdb6a713a9a0eacc41684f5073f0

  • SSDEEP

    1536:+2O8ZJKlYJvlxuvfWP77S4eVZwbSde+3uefh6Ehu6FOXRNfDQLuvn:ZZNplIvfWP3eVZwbSdzhfyiOXRNLQSvn

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

147.185.221.23:27898

Attributes
  • Install_directory

    %AppData%

  • install_file

    Sirvr.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Windows.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections