Overview

overview

10

Static

static

10

svchost.exe

windows7-x64

10

svchost.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    svchost.exe

  • Size

    69KB

  • MD5

    35de149d3c81727ea4cce81a09f08581

  • SHA1

    dfa61238834b2f689822ece4f3b9f3c04f46cd0a

  • SHA256

    1803c1f48e626b2ec0e2620649d818ebf546bfe58dffddfbad224f20a8106ba0

  • SHA512

    dc7986c5849b6aa21ce27f0dac697f2a9d069fcd3652f1a50d1d50ab06985b6ea436458cc63dd16d7030be75db7e20c84e62bd05062b06a5ec18e2fca2b50152

  • SSDEEP

    1536:VmWuQglZi3V87QEw59b0fKNEehQCOWdZT1:V/gloEQEy9b00+COqN1

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

147.185.221.22:47930

127.0.0.1:47930
Attributes
  • Install_directory

    %AppData%

  • install_file

    svchost.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • svchost.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections