Overview

overview

10

Static

static

10

Change_my_name.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Change_my_name.exe

  • Size

    78KB

  • MD5

    2195c5e30b04a8d1b13898ea3ffbc8bd

  • SHA1

    b782e1002f09bb10a42f57452b56cfe06f3d1fab

  • SHA256

    6ccdf2b9bb340096ec31eb9e12e0a651b20d5de5f642d91741dc754743ad07df

  • SHA512

    72e893cfbd797879fb5c5da0aff15daf7cd4f881bfa920a6a0d3846f5b50a89378eaf495d118c087829b11e768630e8ac96d6be04423d05a9cc436ef80a3c4b1

  • SSDEEP

    1536:byzZFfetJlUxW/Ad8h+tXfJb+b0XO2bsL7M6xo3sMOhRLXN:byVFEpGz3+b0hk7cBOhRbN

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

147.185.221.18:9014

Attributes
  • Install_directory

    %LocalAppData%

  • install_file

    DiscordUpdate.exe

  • telegram

    https://api.telegram.org/bot6895000093:AAH8ZZOQx0808xanCMQtfdsYiv5WJDCAVxM/sendMessage?chat_id=6842626493

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Change_my_name.exe
    .exe windows:4 windows x86 arch:x86

    Password: ddd

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections