Overview

overview

10

Static

static

10

efae58269c...1N.exe

windows7-x64

10

efae58269c...1N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    efae58269c0a099526d27b8d56ceb9223327748050db9e35e309ae7c88d96211N

  • Size

    74KB

  • MD5

    fd607a691f63b595e271c88d062053f0

  • SHA1

    5525946841b5585a880083f284abbb5e861d3766

  • SHA256

    efae58269c0a099526d27b8d56ceb9223327748050db9e35e309ae7c88d96211

  • SHA512

    ac524a6a832e9a8f9991638f92c0ded4c7ed176dcc191fd972bbe0dfc3ff56b24205c51fa4251ff47dee7a1501d6385e9339b70e5559ad4e6525c1c95762c7a2

  • SSDEEP

    1536:DM2PilDF9dWySyl/s2tjFJhtH8qsTabwbyR2ye/6CCORaDyddkS:jilF9OP2t5JhtHtbwbKzeEORQS

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

session-sip.gl.at.ply.gg:38793

Attributes
  • Install_directory

    %AppData%

  • install_file

    Micrasoft.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • efae58269c0a099526d27b8d56ceb9223327748050db9e35e309ae7c88d96211N
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections