Overview

overview

10

Static

static

10

976-23-0x0...ry.exe

windows7-x64

976-23-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    976-23-0x0000000000400000-0x000000000040E000-memory.dmp

  • Size

    56KB

  • MD5

    1896c4a6839dc441ece9ae88331d857d

  • SHA1

    9ec06b0f6de6ff7f99ae09fbbc5f31362c7a14fe

  • SHA256

    bd473f8f8290592d4a1db47da3d6687456d09aab83f65255b87a3ed8e6a5b824

  • SHA512

    5613226a8ae9f589530c380ed8ce1b9aec60dfd926048bf86ac1be1234de3aa3ce19953cfa919d741e1a3ab24e9d9a7920c2265679bb3cbd2782b3b5b4010f4a

  • SSDEEP

    384:kefZbUpmtitL24CA8AV77DTjeL5onv9zuocWKLz4RJpkFTBLToOZwxJN2v99IkuI:0nXja5Kv95cD4GFL9jaOjhUb

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

Mutex

QTumvC8IOVGR3m18

Attributes
  • install_file

    USB.exe

  • pastebin_url

    https://pastebin.com/raw/nV1XKCv3

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 976-23-0x0000000000400000-0x000000000040E000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections