Overview

overview

10

Static

static

10

f2240b4170...c9.exe

windows7-x64

10

f2240b4170...c9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f2240b41707827837c75e9e49c0bf037ad8ef5f27c0881d7a9e5f91ff5be0ec9.exe

  • Size

    147KB

  • MD5

    d6f4ad8193bd05288ca89b002019d6a6

  • SHA1

    db56d0d63b59a8b1c055c3d487c05da95a1fcc45

  • SHA256

    f2240b41707827837c75e9e49c0bf037ad8ef5f27c0881d7a9e5f91ff5be0ec9

  • SHA512

    5a37fc33c96cbf433888b65488c6354ba91fd41816940bc5c106f288ceb92408eae1f956e32b6c5387bc2628149d6bd7772ceaaf5d1dade0db6b12f5f5dff9c4

  • SSDEEP

    3072:7OFE9eVOjX4NpVq8BxFRzaqF+o2GQJ7/JzqVfGvpm:8E9TgVqwlL/

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

158.247.200.45:7033

Mutex

eZi6vzo05UjRpELo

Attributes
  • Install_directory

    %AppData%

  • install_file

    svchost.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f2240b41707827837c75e9e49c0bf037ad8ef5f27c0881d7a9e5f91ff5be0ec9.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections