Overview

overview

10

Static

static

10

COM SURROGATE.exe

windows7-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    COM SURROGATE.exe

  • Size

    75KB

  • MD5

    434f15cbdf67f504d1dbba4f87e59350

  • SHA1

    13ae6a57dd92ea0235a82197133060b09d9509bd

  • SHA256

    efa9b10e72da83e31499b2316fda23c106ec36d877f4d8bbd6c75bb8b3d9e67c

  • SHA512

    abbb1052ada2d04f9fddb4085fe2ffb96b0acdfdfcc17c80bf68f27a1b3a47f815256c2b9616946f403552a5262aaafe34914292fa9582f67b254e9262ef23dc

  • SSDEEP

    1536:O3un0Od36serzX4hckbHgjkVgjB6oY0xO0BJU64fUX8u:4unp6nrLKckbHgY0xO0BJUhcX8u

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

hope-asia.gl.at.ply.gg:35710

Attributes
  • Install_directory

    %AppData%

  • install_file

    System User.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • COM SURROGATE.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections