Overview

overview

10

Static

static

10

yewowrkqw.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    yewowrkqw.exe

  • Size

    44KB

  • MD5

    17b7f69c106ac1286a2f6ec3655668f8

  • SHA1

    91c951e29adbfad36b9c596b2591bae6e2cb05a5

  • SHA256

    5066005caba8dc57486c82bf82f452ed41b11c19fb16c9e0e8f64c4a19f577f6

  • SHA512

    52dd8d6a679d80cbd2bc57ae31528c00d3ab5037c33c19506098658cb4e7ade77790ac1e63bc3f7b6dc1748205257aaf7f3463bba12f3ef87f9e79449c80462f

  • SSDEEP

    768:pO36H7BEIliviyzwmLP8SBVKSbFEPa9b9Bq6tOFhazbKSg:ptBE9cm1BVrFd9pBq6tOFcXg

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

Javv-46764.portmap.host:46764:2443

Mutex

czmCI6dS2JGO2CQ7

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • yewowrkqw.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections