Overview

overview

10

Static

static

10

ef9d2831cf...e3.exe

windows7-x64

10

ef9d2831cf...e3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ef9d2831cf11c271df7db118c74a9322c6f0d362eab3d57749906654c7858be3.exe

  • Size

    33KB

  • MD5

    f1be2ff81227658111d7bb0900d87d82

  • SHA1

    8416a9811e0a83343c13387a55b2d72fc666a994

  • SHA256

    ef9d2831cf11c271df7db118c74a9322c6f0d362eab3d57749906654c7858be3

  • SHA512

    622f30331713d3c4fa4fcc9963c1b52ff0f263802c936e3c669b1b4650c6b9134207df6c97d7dc5940257565acf3d8dabf0d040c16ee9c4b205f6e74d275ed52

  • SSDEEP

    384:sEP7LGQ6ZXd0UmrpLSmPM42pfL3iB7OxVqWGRApkFXBLTsOZwpGN2v99Ikuisz86:pXGQ+OVXU42JiB70cVF49jA8dOjhIb4

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

research-was.gl.at.ply.gg:58470:3582

research-was.gl.at.ply.gg:3582
Mutex

oP3gVU2CgTGfE7IK

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ef9d2831cf11c271df7db118c74a9322c6f0d362eab3d57749906654c7858be3.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections