Overview

overview

10

Static

static

10

ac9ef83f6d...8N.exe

windows7-x64

10

ac9ef83f6d...8N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ac9ef83f6d6ae646a08a97ecfe311a8beddacc41e0add58f8516b657f627ee18N.exe

  • Size

    37KB

  • MD5

    2efa1b0fccd8c71d0e50c32d5fee164c

  • SHA1

    0e04e3f8dc5e1b8666f0b302746cbb4c1005e9a3

  • SHA256

    1a7549e698cf8dd9b02942a972f457da2519467ca8cbf439cfe573708caba41a

  • SHA512

    a1a7f05aee4d2e7e6414b2c1a58375ba5aa70a707883e46c588b292517de890c26e37fe6d191a2428a870de99a26f5d6957ab032618c878218b9cc62b85d4500

  • SSDEEP

    768:ztGRiYTgP/NNo5GfjS61216La/FP192iOphi7X0:zkRi+gsGu6McLgFt92iOpeX0

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

3.1

C2

role-fresh.gl.at.ply.gg:2522

Mutex

tZ4Yyzni0aPUlFjz

Attributes
  • Install_directory

    %ProgramData%

  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ac9ef83f6d6ae646a08a97ecfe311a8beddacc41e0add58f8516b657f627ee18N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections