Overview

overview

10

Static

static

10

XClivcbcbv...nt.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XClivcbcbvcbcvbent.exe

  • Size

    39KB

  • MD5

    a40bbe0710c302b751bac0ef05715269

  • SHA1

    03819c237e82daaaa0171f5e482bf66a4ce3a94b

  • SHA256

    f7b6bae6e4ddaf78db5f4908358030a58ecd2bb24687fe6d1332c6f491eb5600

  • SHA512

    b6e7dec8b7dac422c9b8ec1af50d9b38336c1e55ba156bfe171ec7db2c313c5aad54ee772611bf830580285ab87fa80622814e1f030ad0afd85b7bc1507c917f

  • SSDEEP

    768:5np2iB3sNvzK2AwjzeJYEW7KbiCqEoFN9Uv0OphcjtYGkn:eiB8V6tWlCq9FN9UsOpwBkn

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

https://pastebin.com/raw/p7p5uPXQ:1

Mutex

7CU7hxGor5QneXs0

Attributes
  • Install_directory

    %Userprofile%

  • install_file

    msconfig.exe

  • pastebin_url

    https://pastebin.com/raw/p7p5uPXQ

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClivcbcbvcbcvbent.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections