Overview

overview

10

Static

static

10

52d778b6b7...c6.exe

windows7-x64

10

52d778b6b7...c6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    52d778b6b7e3115d0746bd1aef233cb7d97c8a2f018de80cd37bfefc0388a4c6

  • Size

    76KB

  • MD5

    ecb15e11ca93f8beac14543492407f4f

  • SHA1

    a47d421585ec1da07d32e0d8101829fcbd300bc1

  • SHA256

    52d778b6b7e3115d0746bd1aef233cb7d97c8a2f018de80cd37bfefc0388a4c6

  • SHA512

    59f3dee42563a4f41e24dfff6c51df55f73610b16065cb35734a798c2942a5c06e6c161ad9063e800d917401939313709113ad1326cb7f669a99e7e7cd9f027f

  • SSDEEP

    1536:Sx3GsLjPnIjCxAVqGePY06MJebCqfnQ2oA9FKg+6HOqMed69:2DnBA6PEMJebCMnK+FZONl9

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

realark.net:5235

Attributes
  • Install_directory

    %AppData%

  • install_file

    svchost.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 52d778b6b7e3115d0746bd1aef233cb7d97c8a2f018de80cd37bfefc0388a4c6
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections