Overview

overview

10

Static

static

10

72d1c1095c...3N.exe

windows7-x64

10

72d1c1095c...3N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    72d1c1095c58dac49282ff54d3ca3b7a927681e2a56d5e09e90cabcf48118fa3N.exe

  • Size

    70KB

  • MD5

    cb23e666cb32131891973871950f8080

  • SHA1

    ee3223b5ace61c7e111d21f986b8e3cef73cdd11

  • SHA256

    72d1c1095c58dac49282ff54d3ca3b7a927681e2a56d5e09e90cabcf48118fa3

  • SHA512

    aeb329ba7285a822b39be4794720fd57caaa4535d26ee98ba660862ef17e46aa93b70a1d6a415ad1e685d5cd9187cfe97c9a018d0ee63472b2caade3b75ab7ae

  • SSDEEP

    1536:DsYRmYACQFrxIHmT7OMbEG7nKENiCD6+45xOGvLUuxqO:DZJj4dIHudbEdIz6xOGvLEO

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:33795

includes-confident.gl.at.ply.gg:33795
Attributes
  • Install_directory

    %AppData%

  • install_file

    online-fix.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 72d1c1095c58dac49282ff54d3ca3b7a927681e2a56d5e09e90cabcf48118fa3N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections