Overview

overview

10

Static

static

10

Loader.exe

windows7-x64

10

Loader.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Loader.exe

  • Size

    66KB

  • MD5

    628b8d56d18d4d581c20372b423b8138

  • SHA1

    7a1cb2fe1995dd00c2b8027ae1f51bfef5ecd1ca

  • SHA256

    093b42daa9fef07bb6bc493f5b158070557d4e2980965b58a69eae544119384c

  • SHA512

    7f82b46e2b9bdf25bd5cdfb348048126a7c0a4bb4e07a7b22e2b71948dcf3d8699e08a22c0c77927525e5dadcfa3574587a9fa8ccd8138791ef173475acc16cd

  • SSDEEP

    1536:iEkWcN6qFFL9PAOMx37PlSiR5smz9RGFS1:iEkWO6qFFL9PAOMZ9SOC4

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

127.0.0.1:7000

Mutex

PMawnpd159lRre2h

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Loader.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections