General

  • Target

    Krayton-Setup.exe

  • Size

    15.0MB

  • MD5

    8d9825b5c71ce9c61eab9a9c9966670d

  • SHA1

    38b676fd58e571453ef38f0e40c577b9943a4a50

  • SHA256

    629e31cfbe2598295daec354e9085dbe9f55fd0cd58b9305f0196560d51ccd9f

  • SHA512

    8c095cbae4fe0aebfbd21c076aedf0f057967e1d6f56dbb2f29d4dbaf194867a51256778fb87e3320f41f3bf65454e930c134579d2014e4838d4368b3aa6a178

  • SSDEEP

    3072:yjWwFFUmuzIBSIObVJPROhW+BzDjWwFFUmuzIBSIObVJPROhW+Bz:y3+musBdObvoX3+musBdObvo

Score
10/10

Malware Config

Extracted

Family

xworm

C2

192.168.48.132:7000

Attributes
  • install_file

    UserConfig.exe

Signatures

  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Krayton-Setup.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections