Overview

overview

10

Static

static

10

bad804436f...d2.exe

windows7-x64

10

bad804436f...d2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bad804436fdffd9399bff8fe714756b62e5b6506da2d5ab8cca56865d3d822d2

  • Size

    167KB

  • MD5

    182b050b7db65d4036ab030adaa255b0

  • SHA1

    5f7a4ee3c631e7fe4800aaa74cbc76d8f9a9c034

  • SHA256

    bad804436fdffd9399bff8fe714756b62e5b6506da2d5ab8cca56865d3d822d2

  • SHA512

    45724a6a5639fe35854cd63a7ff8769283dc1452d70458c51533ebbf89950ec91ca7896c5388e2ff722cde612f58b60f31630d67cd5dadbf25ee67ea52bedb46

  • SSDEEP

    3072:AvOGEcyb1zL9RzsOvfPITBz65/M6If+3Js+3JFkKeTn1:AJTybV9RtgTxBt25

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

independent-money.gl.at.ply.gg:21593

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bad804436fdffd9399bff8fe714756b62e5b6506da2d5ab8cca56865d3d822d2
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections