Overview

overview

10

Static

static

10

b5eda42abb...29.exe

windows7-x64

10

b5eda42abb...29.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b5eda42abb5bf9aae5d4f0b20ba10d02cdb80c061d03cd22cd64c6d15156c129

  • Size

    32KB

  • MD5

    24e8e41775d96bc50742d819eea8d8b1

  • SHA1

    46035eb78db2240660ef29d8d7c245a0af4acc4f

  • SHA256

    b5eda42abb5bf9aae5d4f0b20ba10d02cdb80c061d03cd22cd64c6d15156c129

  • SHA512

    4b0b67a15027e8c4a70fdb66246d7a3ef184cf2b3b0189ff6fa77c1b8393c43930d8b1b66b7035a13e8d9637787a2d8024069a94645aa1798de3ecbf11949da5

  • SSDEEP

    768:AVa+vNtg+PB93Tw4dOdVFE9jUqOjhvb0:qvNtgw93U4dAFE9jJOjBo

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

191.96.224.174:7000

Mutex

GhpgNLjmxlrMtYOM

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b5eda42abb5bf9aae5d4f0b20ba10d02cdb80c061d03cd22cd64c6d15156c129
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections