Overview

overview

10

Static

static

10

e6cfabef69...53.exe

windows7-x64

10

e6cfabef69...53.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e6cfabef69322a4578808665072e1db85e881736d686e64c229f1ea8d3435153.exe

  • Size

    38KB

  • MD5

    4ec8a668815c66a7b555f1290e26bd19

  • SHA1

    552be57ae2d287e494eabe00590a1e7ed9c9be5c

  • SHA256

    e6cfabef69322a4578808665072e1db85e881736d686e64c229f1ea8d3435153

  • SHA512

    8d4421a799f064cf1ec894f1900d3cb766fac9f031001b9785bb182813eb286b3000d7be90166d08e6416ff12de2d5ba36803b51a8f58c07413fcd92aa0a2445

  • SSDEEP

    768:/V7Kjkq9PMXOh5G7m9NFfZk7FWPB9WNOMh2aQkryy:/xq/oa5PFyFO9WNOM4syy

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

america-surrey.gl.at.ply.gg:54338

Mutex

uqf0RwmqN0bmwjTI

Attributes
  • Install_directory

    %LocalAppData%

  • install_file

    svchost.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e6cfabef69322a4578808665072e1db85e881736d686e64c229f1ea8d3435153.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections