Overview

overview

10

Static

static

10

132.exe

windows10-ltsc 2021-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    132.exe

  • Size

    56KB

  • MD5

    1bc4e67e8e5636713df1be6d4c821343

  • SHA1

    ab2e070e4a1e70ff33e2a17c0ce17eb3e4b2823d

  • SHA256

    a5976230b3e5d8efc40dea84c992209fccee38c06c310ee881cd8d1b0872ed0e

  • SHA512

    fe032a075b5e13d6a1b1e3101c92b4330030d31f507f9bf4a3482f71d8670a3594ca93ce7ca809fd41f2a38d9b71eeb5faa036bcd9f2d97297e21aad05874be2

  • SSDEEP

    1536:/gJbKVjEfb1fI50/igd7RzbnbGC79Obwu:IJIjWhfI50qg5RzbnJhObwu

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

3.1

C2

147.185.221.19:26229

Attributes
  • Install_directory

    %Public%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 132.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections