Overview

overview

10

Static

static

10

8ede82663c...0N.exe

windows7-x64

10

8ede82663c...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8ede82663c5217559cb1d93800f776da29c3956bd88374e4050b4bb640c8c780N

  • Size

    344KB

  • MD5

    29f1b2d4666c3b774d4a4a5306563430

  • SHA1

    049060d0a9ccbc7012941a503beed9c925d4aff1

  • SHA256

    8ede82663c5217559cb1d93800f776da29c3956bd88374e4050b4bb640c8c780

  • SHA512

    d99ea9256618614345c8b54c4ae8ed9444cad03597d850927b264abc299238874127616d32abbfed8f94113c0309823ce2b41138af0a677cb3fac04a6cbc6721

  • SSDEEP

    3072:PQYURt5I3bswN8rFAdMO0xAZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ+ZZZZZ6:lBbns+GIIIIIIIhIIIIIIIIIIIIIIIU

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:9999

Attributes
  • Install_directory

    %Temp%

  • install_file

    Steam.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8ede82663c5217559cb1d93800f776da29c3956bd88374e4050b4bb640c8c780N
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections