Overview

overview

10

Static

static

10

f79a0e092e...ed.exe

windows7-x64

10

f79a0e092e...ed.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f79a0e092e261977846be4ea9871a45b89e5716d38a61c753e68ca2315286bed.exe

  • Size

    58KB

  • MD5

    e7402bd65e8bff7c8776f808f48b4bee

  • SHA1

    c686004ad859893867ada0a212713c699cf16272

  • SHA256

    f79a0e092e261977846be4ea9871a45b89e5716d38a61c753e68ca2315286bed

  • SHA512

    22b6c6e556210104be395eae67407f49046ad85e5601f8f6f85c0b857a45ef2d5a557c884204822ea360dd959e414d2c43312902ebc7c81778c5d37810516b44

  • SSDEEP

    1536:d1b8dHo9Fz9LJOjQF5311095FIA19G7qZb:IHo9Fz9LJOjk0nX19PZb

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

week-neck.gl.at.ply.gg:7880

Mutex

rQQ4V3IRAciQgn0j

Attributes
  • Install_directory

    %Temp%

  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f79a0e092e261977846be4ea9871a45b89e5716d38a61c753e68ca2315286bed.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections