Overview

overview

10

Static

static

10

Excellent2.0.exe

windows7-x64

10

Excellent2.0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Excellent2.0.exe

  • Size

    61KB

  • MD5

    b5cb5c0b4b3f5bbf0056a7abcd2574f9

  • SHA1

    681b26cbbb2b290aa94a93523bc5e9960c72c538

  • SHA256

    76e2288825cf5185b61022a16fcddd285c51eda1cbe32d62f658d277b24f378b

  • SHA512

    9340e7f9c03597f3eb9e6f9eaa457959289aac0f6e6b969e457e7290a215de0a318ab194ffaf3d4d8929e905055e2b1c352fe8fea3e2dccc0824b556ade66c5f

  • SSDEEP

    1536:ochGo/XyaRwm5I/QZyR3+bRo8DeLw6gOMdbLyRhk:o2qmbq3+bRo5uO8buRhk

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

all-advocacy.gl.at.ply.gg:33270

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Excellent2.0.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections