XWorm PE Executable malware analysis – 0e60ffa9b5c9

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

File

Type

Portable Executable file

Detection

PeID

Borland Delphi 7 - Nstd EP - ASL sign

1 malicious · 4 files

EXE0e60ffa9b5c990987cfae0ca0dd88b41XWorm

Structure

BINResources

Config. Field	Value
Mutex	qsccJhuhuhuhuhuhuhu
Hosts	thursdhuhuhuhuhuhuhuhuhuhuhu
Port	2huhuhuhu
KEY	<6huhuhuhu
USBNM	<XWhuhuhuhu
LoggerPath	%Phuhuhuhu
family	xhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Mutex MUTEXmalicious

qsccJhuhuhuhuhuhuhu

CnC CNCmalicious

thursdhuhuhuhuhuhuhuhuhuhuhu

Port PORTmalicious

2huhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.