General

  • Target

    23424.exe

  • Size

    41KB

  • MD5

    90bb3b298633f7ddaad79df211ab8ab3

  • SHA1

    c5b967e953c60a851100824ab6d61c45dd1635e7

  • SHA256

    fa97e073790ceeaf64c2dcc81e743a241f2c796311a55b14e5e7fbc42964a82e

  • SHA512

    98afc14364740a26023a477bb7311c74f1227e252e75cc24c523ac736a237b305ddc874a70f1dca0abc5d037d35e14683102e0273b627b9ae174bb4986ed333c

  • SSDEEP

    768:6wV5gUaK83YKjOpfJF5PM90vs6MOwhx3Euo:6siUHKYKjsFS92s6MOwL9o

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

C2

house-rooms.gl.at.ply.gg:21040

Mutex

aKd06Ujf0FD5zJUk

Attributes
  • Install_directory

    %AppData%

  • install_file

    2234.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 23424.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections