Overview

overview

10

Static

static

10

b88c688467...39.exe

windows7-x64

10

b88c688467...39.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b88c6884675cdb358f46c1fbfeddf24af749372a6c14c1c4a2757d7bde3fbc39.exe

  • Size

    75KB

  • MD5

    1ece670aaa09ac9e02ae27b7678b167c

  • SHA1

    d98cffd5d00fe3b8a7a6f50a4cd2fc30b9ec565d

  • SHA256

    b88c6884675cdb358f46c1fbfeddf24af749372a6c14c1c4a2757d7bde3fbc39

  • SHA512

    ad8b877261b2f69c89aa429691da67100a054006504a2735948415eebdc38eba20f923d327347560d066e65b205e80ea8f0a296e586107dc051d9edc410b40c5

  • SSDEEP

    1536:ymvAmjmeQw5tYlFobzcU9QN7Xxwtrw8W49cOYfpLVHgiL:bbzcUwKtsDnOm5L

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

147.185.221.22:47930

127.0.0.1:47930
Attributes
  • Install_directory

    %AppData%

  • install_file

    svchost.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b88c6884675cdb358f46c1fbfeddf24af749372a6c14c1c4a2757d7bde3fbc39.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections