Overview

overview

10

Static

static

10

dllhost.exe

windows10-ltsc 2021-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dllhost.exe

  • Size

    35KB

  • MD5

    dfe1a183698d916bb80a2b3f5e16b146

  • SHA1

    75d97ebebbf43679de5b14e4d3be23d22a09ba21

  • SHA256

    a2cc98c332e44b73a8737a390dfeaaa17b08adaec271ba6d64eb2bf4c8cc5d18

  • SHA512

    2e67e15d4ad7c0c233021770de96a3cf6c95a22bed89fd31f0a872266f34a4cb3d41872de61bd929964b63170a5db5663e778a96d045b2723edce648bb750970

  • SSDEEP

    768:rDMfF7zLKYs2Byj5MuddqLa9Fk9wu/O/hr/q2O:rkF7HKYs/1hdtFk9wgO/dC2O

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

ensure-manual.gl.at.ply.gg:41199

Mutex

ZtTzf8WYbWwk3j1n

Attributes
  • Install_directory

    %AppData%

  • install_file

    dllhost.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dllhost.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections