Overview

overview

10

Static

static

10

SAMX222C.exe

windows7-x64

10

SAMX222C.exe

windows10-2004-x64

10

Realtek HD...ce.exe

windows7-x64

10

Realtek HD...ce.exe

windows10-2004-x64

10

SAM X222C#.exe

windows7-x64

1

SAM X222C#.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SAMX222C.exe

  • Size

    3.3MB

  • MD5

    918951c4657e9cdf39ac1b275bfd2e95

  • SHA1

    7323e59b2c4d60b6639bfcba11f4c02bcb94e347

  • SHA256

    b50d25c24ba5f1f096e883b3a9970d2c080afb37dfe2f55a25a1c7ed3ca36505

  • SHA512

    438c7554d8b72db63d598085b2c6fae9bfa1895154ebbaf96a5d2a498459b9a3516611613515f04dbc198edb8b2d7ce2ce63975064f28af63f3efa1e50e3e0d7

  • SSDEEP

    98304:n5rc//PaUFOFWiRbNqz1xC4fkkbcZvqaVRn0:oi1Bc144M5vqaPn0

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

147.185.221.23:25808

Attributes
  • Install_directory

    %LocalAppData%

  • install_file

    Realtek HD Audio Universal Service.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • SAMX222C.exe
    .exe windows:4 windows x86 arch:x86

    29b61e5a552b3a9bc00953de1c93be41


    Headers

    Imports

    Sections

  • Realtek HD Audio Universal Service.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • SAM X222C#.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections