Overview

overview

10

Static

static

10

52853393cc...fN.exe

windows7-x64

10

52853393cc...fN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    52853393ccfb323ec997ed2484f89aeccb790d30473447290d94214484920f6fN

  • Size

    69KB

  • MD5

    f9abc48b0f85f12ea5b7e89fecdd9840

  • SHA1

    5990c39a8a55085e2a4135370dea95b94dfb7ded

  • SHA256

    52853393ccfb323ec997ed2484f89aeccb790d30473447290d94214484920f6f

  • SHA512

    e4ec7e40b573dbd6972cf473a595ac8f41e9541ef2fd21a956b3f6ca07b4e264b1b90b34c5dda1650c83c5b7b2df4ca4929727ae47c27be5573ff7c7199a3c80

  • SSDEEP

    1536:PS5NzElzEF7D3EbZvzAlEM+bl7upO6bWO0Lxv:PS5dElAp3Elbez+bloWO09v

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

office.mscdn.org:7009

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 52853393ccfb323ec997ed2484f89aeccb790d30473447290d94214484920f6fN
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections