General
- Target adawd.exe
- Size 32KB
- Sample260913-d39sds1cnf
- SHA256 eecfe8d2236cf418f3657fd5b78033cd776246bb69e7451da3406131b3762284
- MD5 d1003b53ee4804c15a2bfeabcd52eed7
- SHA1 3af5260f0a637208b5e378531da28e7dee9c3458
- SHA512 37754e3e72a2dc2a3b1e0c7726fc100c8bbbc185db36aa60de43022887723f529a8f876bf8affc4db67a8a91f3437a5e72d4083b22cf1f6c5bd86d7382e35979
- SSDEEP 768:ORPD9OQhx/BL3Tw49FzVFE9jiieOjhRbo:Od9OW/L3U49HFE9jirOjD0
- TLSH T167E22B4877E44712DAFEAFB12DF262061271D517D823EF9E0CE485E62B67AC047407E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
adawd.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
xworm
Version
-
5.0
C2
-
x0hpgvcqiu.localto.net:2278
Mutex
-
Sy5iXAKX9KmnkWLU
Attributes
-
install_file
USB.exe
aes.plain
Targets
-
- Target adawd.exe
- Size 32KB
- SHA256 eecfe8d2236cf418f3657fd5b78033cd776246bb69e7451da3406131b3762284
- MD5 d1003b53ee4804c15a2bfeabcd52eed7
- SHA1 3af5260f0a637208b5e378531da28e7dee9c3458
- SHA512 37754e3e72a2dc2a3b1e0c7726fc100c8bbbc185db36aa60de43022887723f529a8f876bf8affc4db67a8a91f3437a5e72d4083b22cf1f6c5bd86d7382e35979
- SSDEEP 768:ORPD9OQhx/BL3Tw49FzVFE9jiieOjhRbo:Od9OW/L3U49HFE9jirOjD0
- TLSH T167E22B4877E44712DAFEAFB12DF262061271D517D823EF9E0CE485E62B67AC047407E6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detect Xworm Payload