General

  • Target

    internal dev.exe

  • Size

    209KB

  • MD5

    fe91ca182485564d2be7771b75a10a59

  • SHA1

    e6f611ed398bda0d760fbbd30f7ce723d68e4775

  • SHA256

    0e432858592548d368cfd1581549fa62041dbc2e408d65c989066876fdd99037

  • SHA512

    6913a5a4a71d5a27c004bf63a79f7eddecc595d6a8ae91bfbd03ad13bab2c2ec61ba65e6af6418a527a7dc47c749867236b034cfc0a779648e1361371a71e372

  • SSDEEP

    3072:ZjtGEil7xbTZvIELgOzedhY6d6geO/SXdpPONf/NwBV9R:qtLbpI3hYueF/mNyB

Score
10/10

Malware Config

Extracted

Family

xworm

C2

7.tcp.eu.ngrok.io:15568

Signatures

  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • internal dev.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections