General

  • Target

    TestBuild.exe

  • Size

    75KB

  • MD5

    37f3bb8491be6cfca016f93073edc214

  • SHA1

    93046b916cdbfd3a1564ab5d80d468369a7d730b

  • SHA256

    1a1f720bb5fc39e6b38e9ca7fd876022e9154f9ffabd4b6e936131348009597c

  • SHA512

    56839a911d2a39dd6e30f499c76685e0384ac4a0cd0225ab775d50ca065407b8a9e9ca7a908a3b01588c4cf39246621994baa33836bb25d0c64d10dbaeb8a19c

  • SSDEEP

    1536:NSDIM+DnYZ7dGOFSe2VawMksNn1DLujZbOibbq/Eq6i6T4bO/0o0/Zwm4U:NS0McyGO7PwG9tLujZbO9YUOc1wm4U

Score
10/10

Malware Config

Extracted

Family

xworm

C2

monkeys11-39982.portmap.host:39982

Attributes
  • install_file

    Unity Updater.exe

Signatures

  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • TestBuild.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections