General

  • Target

    HWare Rust.exe

  • Size

    67KB

  • MD5

    1b898ff48a61e22368af85912a7eede0

  • SHA1

    25ba2423ebac1881bb6d4e387fae9457114656ad

  • SHA256

    c6209a860028c241480083ec3ded938c59cd008f88999a0eccdc66d82c12261b

  • SHA512

    1f817211584d0198f1996e3da87b9965e6b6db8d979ddcc6e8c396cb7a5fec06cc998c1b4e2c7b8af7bae19be66ffa111a9363f20cd1514c7aa5a0a9726356e6

  • SSDEEP

    1536:B40xJxlgXcnqlMGVNaiKbXJsrPPCiIe06bTObekGu:Z3gsn6M2TKbXb7ehTObvf

Score
10/10

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:8808

77.34.131.206:8808

Attributes
  • Install_directory

    %Public%

  • install_file

    taskhost.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • HWare Rust.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections