Overview

overview

10

Static

static

10

2052-150-0...ry.exe

windows7-x64

10

2052-150-0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2052-150-0x000001A9BB0E0000-0x000001A9BB0F0000-memory.dmp

  • Size

    64KB

  • MD5

    2e511711556c84a5748e2a3c9508f79d

  • SHA1

    793fd65b8ad3e3ff4d32b2a2a77873cdd2e51d14

  • SHA256

    38933a739032b6ccbe0e7e21c2a3f68b26c87ec8f89e51701899099443affaf8

  • SHA512

    ac49bf92e5ca38a776b2435eb502a8c04334f76a9d76f68e1c78b6d4edee9506959f840808884a71c17e45822e41b167c40de0a1b33caa8a4bed2775cdf274c7

  • SSDEEP

    768:8TaTaHaxVq3LgGHk8qZHkvhxST9BeY0FWPG9tM6TOMh+7It:8TaT4a8gykRhWhx69BehFh9tM6TOMIk

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

Mutex

6lFXjUqCtT3P20q9

Attributes
  • install_file

    wintousb.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2052-150-0x000001A9BB0E0000-0x000001A9BB0F0000-memory.dmp
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections