Overview

overview

10

Static

static

10

sex.exe

windows7-x64

10

sex.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    sex.exe

  • Size

    63KB

  • MD5

    0b244bc9a9d1b236e2a9ad1757088be3

  • SHA1

    f57f0e1373ede67afbe9832918c66161c16414dc

  • SHA256

    509fcc68364e499b667b19c3ba7ab1bedcb7eb0831adea59954e37e73a44f79e

  • SHA512

    d0c51da4bede55fa4b524c5604210587ead30b52499d7e9dd04e6735203021fdd3f04a6b77f7838b1c75797e21bfc10cfda1b2e35f6e9120659557fe261f9df5

  • SSDEEP

    1536:Y776WKPld2VaaKBab7jfmuQ6mS0mOvsVxZ:Au7PldztBab7jo+OvszZ

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:52412

chudai-52412.portmap.host:52412
Attributes
  • Install_directory

    %Temp%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • sex.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections