Overview

overview

10

Static

static

10

PULSERISERS.exe

windows7-x64

10

PULSERISERS.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    PULSERISERS.exe

  • Size

    66KB

  • MD5

    c7d4a5db406ffb1183703e2412689c55

  • SHA1

    0b3fe2c311f5f78594443e21512de3f749eeec24

  • SHA256

    5b671ca98460ecfc91f9882c6b01a8ba6962e2e6b1c8cdbfa24db1dab9fc9022

  • SHA512

    56585378f5ad89b35a69fd0ab1bd566ba03cb0a636cc4160ec126ab7ed9130667cdaa808051efe6b6d04f80a59e0aefef9aa955745a1908094867f2d0eff1d80

  • SSDEEP

    768:l42KAQ+AK0SMZsV/m8Rk3fRomRtD9Wwbuht8yN/bR8MwUBzT67Fe4d7WO3Gh8F91:6hZSoMj43XMPbHwU50B7WO3GsKGRx

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

expected-identifies.gl.at.ply.gg:28789

Attributes
  • Install_directory

    %ProgramData%

  • install_file

    aritcalpaid.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • PULSERISERS.exe
    .exe windows:4 windows x86 arch:x86

    Password: lol123aaa

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections