Overview

overview

10

Static

static

10

00956e3a55...b3.exe

windows7-x64

10

00956e3a55...b3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    00956e3a55867b348d29da5f04cf6fb51e85872389ce6dc5f4015a958c575fb3.exe

  • Size

    137KB

  • MD5

    1a925fce50787a5028b73dd32e0c7dce

  • SHA1

    7205d5c3d7efbc5805eb0b343a1bc83903e7589c

  • SHA256

    00956e3a55867b348d29da5f04cf6fb51e85872389ce6dc5f4015a958c575fb3

  • SHA512

    ceec3fa381bbcb32fb520b876fac67defc2712fcf7dcbf4a69d50a227c8f81f1cbb3aac03fc0f2ac007105b9b378c5a1c405ec2b326bf284795c0ae0e85d93a8

  • SSDEEP

    3072:6fjh7Fv9fjOwiBz65/M6If+3Js+3JFkKeTno:8hJv9AxBt25

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

147.185.221.23:48450

Mutex

2YsFPOHVMLfmF9px

Attributes
  • Install_directory

    %AppData%

  • install_file

    Update.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 00956e3a55867b348d29da5f04cf6fb51e85872389ce6dc5f4015a958c575fb3.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections