Overview

overview

10

Static

static

10

CheckersSe...ol.exe

windows7-x64

10

CheckersSe...ol.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    CheckersServiceTool.exe

  • Size

    43KB

  • MD5

    f0b96a06a91f4a2c227915b023a03ad8

  • SHA1

    e9aa8e953d55c0dc9c45597da2b59e7961e962fa

  • SHA256

    20764846e89dceec8ea2ca4711e0566b3345f946949037df154c8d67f723a5df

  • SHA512

    75f9de32cb50cb27528412cfc356455d82eb41a9dd0788d52e059e0b6afc33a33a42ae9341bc24eaadcaab675c5fac888ebf52e51095f825a67384d879fdc786

  • SSDEEP

    768:iIysL9yYzLx1gwrDxKTq9L11pxyN+F+s9OJxH6BO+hYbVLlThop:itAyA91gwr97xTFr9GxH6BO+2Vjop

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

127.0.0.1:8848

Mutex

xdi7mlIIsJa9O7Ut

Attributes
  • Install_directory

    %AppData%

  • install_file

    Checkers Service Tool.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • CheckersServiceTool.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections