Overview

overview

10

Static

static

10

Compiler.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    fgsyfy.zip

  • Size

    63KB

  • MD5

    0224e1a5dd495d4ace558508e94fcdf5

  • SHA1

    29ec552f8cfcc83f19ea4aeb3ec6c66bad78e690

  • SHA256

    1e813943d3f7e89b17dcdee7d167b0aaa3b5faf9a0d31842c0bfc8ca8dc66c23

  • SHA512

    bde3fe2aa6ebe5c1cdc319b53dec6f31d5c16ab4171fbb635432352cf70cb91f07624c090a8e7da06e3cd4b1b699763fb97625c992e2ca772df5e8304ea348dd

  • SSDEEP

    1536:KsyDrnue/aYcQCsrJdJrQBCeADt80URRjSu2Kdcf7i:9arhHJdJrQUeADt8Iu7dcji

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

0.tcp.jp.ngrok.io:12458

Attributes
  • install_file

    USB.exe

Signatures

  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fgsyfy.zip
    .zip
  • Compiler.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections