General
-
Target
XD.exe
-
Size
35KB
-
MD5
3325aa456a84042c0c49c2270d6dfef4
-
SHA1
2e116e494d7849cdd5da936fbe7a0d6d9746732e
-
SHA256
46a15d01c694ee41c0805a6bdfb0211ba6ee4b3f872350be6855e409a6753047
-
SHA512
321ddfc7e9b24f452be1366a0ca4c006201f2ae2fe75a405ebab7e3dd2118a28ecf71475e75b6ae8d596e01d7353f79063e49d9cbf9ad65c54619db002d059a3
-
SSDEEP
768:1Dg+sxKVenGrIot2YbxFy9IJ6cO/h6/bpQ:y+pCOIoLFy9IJ6cO/UjG
Score
10/10
Malware Config
Extracted
Family
xworm
Version
5.0
C2
tr3.localto.net:42425:52773
16.ip.gl.ply.gg:52773
Mutex
0dAwSqZrBgY6GXiC
Attributes
-
Install_directory
%AppData%
-
install_file
InvidiaDriver.exe
aes.plain
Signatures
-
Detect Xworm Payload 1 IoCs
-
Xworm family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
XD.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections