Overview

overview

10

Static

static

10

3770fda357...84.exe

windows7-x64

10

3770fda357...84.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3770fda3571c0480ab2ddffb03c5fd30a063989e62b622f35b7cb850b073ef84.exe

  • Size

    66KB

  • MD5

    1e147f6a2016797ab2a37242e8bd2043

  • SHA1

    c498f49f624eec6253b3cea763fb88e269eee61d

  • SHA256

    3770fda3571c0480ab2ddffb03c5fd30a063989e62b622f35b7cb850b073ef84

  • SHA512

    99f9b17bcb0338b2cb0d7cf7bd44f719a618ad413f3fbd852eda54291b7a72fe0f04b56fa7d6f43fb23bf30a815b81ad416974fe527b34ecc7685cbeafe96bb2

  • SSDEEP

    1536:Lmaqo8oFLXQpShesWwbY5VEp0+Ua+bQEPmlZDhwIx2OEKu+Op:3veQ6VE2+Ua+bQf/aIsOlkp

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

147.185.221.22:1337

127.0.0.1:1337
Attributes
  • Install_directory

    %AppData%

  • install_file

    svchost.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3770fda3571c0480ab2ddffb03c5fd30a063989e62b622f35b7cb850b073ef84.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections