Overview

overview

10

Static

static

10

250520-1nh3fsxnw6.exe

windows10-2004-x64

10

250520-1nh3fsxnw6.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    250520-1nh3fsxnw6.bin

  • Size

    33KB

  • MD5

    2dc2bf49033fb0fa259715d1075e3f15

  • SHA1

    1ecf3b7fd097ef8916edba1ff561494bf1db9e3b

  • SHA256

    9156a20aca00e40299e9bf88e12e3361e6c94b0ac9c69c159b48b62d11954cc7

  • SHA512

    b4c7c730987cb85d48fe44b60be2913fab74df9f0beed02a19a2c59d918aa7a2ee3f4656b655cb43b86c3029067f3c8bb01c1ad39f6f840ae2786609fba41aa7

  • SSDEEP

    768:XUa+vNohsXn42JiB70lVF49jGOjho2b1:KvNohsn4WiR0HF49jGOjy2p

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

127.0.0.1:4000

Mutex

h1kTqLuPQKZtllJj

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 250520-1nh3fsxnw6.bin
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections