General

  • Target

    7c408a938968a84928bb5d9da2be3a54e39cd8f8930e104ba13f1871f0b168fa

  • Size

    202KB

  • MD5

    1912bea3105d17ac2973dd6cacfb5b42

  • SHA1

    f5cd0f273e8e0eafc241ad111fbf0a91a7ba0d19

  • SHA256

    7c408a938968a84928bb5d9da2be3a54e39cd8f8930e104ba13f1871f0b168fa

  • SHA512

    591702fa289dd6ee50c1a0ea5610b824f90c3a4b6379ac46d7dad5f011f8d1d2cb5710ba4df64d3c472508e4c9783670314361564f0124b5670e38a6ac093fce

  • SSDEEP

    3072:3xFyJ+bBinBpOg7XFRUGKXs+S++7KFSbxeY+qDDrM0:Xbgn5XAGqStKEbxI

Score
10/10

Malware Config

Extracted

Family

xworm

C2

topics-junior.at.ply.gg:45283

Attributes
  • Install_directory

    %AppData%

  • install_file

    wininit.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7c408a938968a84928bb5d9da2be3a54e39cd8f8930e104ba13f1871f0b168fa
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections