General

  • Target

    LoaderV3.1.exe

  • Size

    101KB

  • MD5

    db23ea9b40e82e25657f4c3ab3d5c6a2

  • SHA1

    ea1fb55885d7068394498250f72537361f4a9ff4

  • SHA256

    82838e656a6277d7f500e4612df2e85230844df57b4a1accd2ba868716ee4bf1

  • SHA512

    a1602228971c4bf2daffac7190491a38c8444b2fdd00e11bc6d3d72cc75efc091e65edcc981ee24e7d3656e18107ecee6b49c57d5bff7b0578c7cd1c88949865

  • SSDEEP

    1536:+3VkQyUcE2muttbVM5iQ66q1O3PdC93RJoOKB1RJmRFVfB4nT/:K6cIbVMA1O3YlpKB1fGvfBa

Score
10/10

Malware Config

Extracted

Family

xworm

Version

3.1

C2

centre-shaped.gl.at.ply.gg:30014

Attributes
  • Install_directory

    %Userprofile%

  • install_file

    .exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • LoaderV3.1.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections