General

  • Target

    27d7a34caa69ac39da3a839cfa04bc3ce6c01951e68094b9abb496f75ef08b1e.exe

  • Size

    76KB

  • MD5

    eb7801d2d43995b4e7532e7020c5c509

  • SHA1

    e28715c7a888315d86b8247981238a72bbdbcfff

  • SHA256

    27d7a34caa69ac39da3a839cfa04bc3ce6c01951e68094b9abb496f75ef08b1e

  • SHA512

    0bc22c79ec57197f61e7bffb3d78c4163066964f24c4f40fd95d828b0fd3f281da14693f7e1bab5f345baaa15f2f259f9ca3d20fe90517b4b676a7296978b1bf

  • SSDEEP

    1536:t510DiS3GNRnQEbax2JZMwo06WKw1XjvOoxXxbYDXJt0ld:tKitRnBbk2JgH8OoxBbaXj0ld

Score
10/10

Malware Config

Extracted

Family

xworm

Attributes
  • Install_directory

    %AppData%

  • install_file

    System32.exe

  • pastebin_url

    https://pastebin.com/raw/qHicYh9j

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 27d7a34caa69ac39da3a839cfa04bc3ce6c01951e68094b9abb496f75ef08b1e.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections