General

  • Target

    REAL.exe

  • Size

    54KB

  • MD5

    92249db702b43c9372fc8e70140330e0

  • SHA1

    729143ff02cf37d7f18103eb4dfa30c8ca66ac6d

  • SHA256

    fe0bb076894985617793c1c2554793d09e213a6e463475e2ad05e584b77f42d4

  • SHA512

    43f382054ea6e26ca969a0d0ee0bab83a5bf646f42cf988b73ad20d06aadfda0efec283fde065aba764bcaa66d2323d3963f84dd7df774253dd5662acc774bf4

  • SSDEEP

    768:H+gGYfwNGCP9nMQr6KcaGG59/vSrjZabkx8Tpbg+PPYO6MhtjN1:HbAP9n6nG5QZabkCTps+XYO6M3j

Score
10/10

Malware Config

Extracted

Family

xworm

C2

0.tcp.in.ngrok.io:12769

Attributes
  • install_file

    SystemConfig.exe

Signatures

  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • REAL.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections