General

  • Target

    HISH.exe

  • Size

    65KB

  • MD5

    0001df7b53136625fb27d3ace8821ebe

  • SHA1

    2e33efd8b58717900e8fb9f7794f4e6c574639c6

  • SHA256

    c1554bb735a6afe5547258858ee71367493816a4b98008a9a31278d8830b591a

  • SHA512

    d679d2194aeb6f39880cc85fb1154bec1c9f55d46e5021c1577ef539e16c8e5f65f70f4edcae948893525a5bc36910f2fab25f4894464dc4e9800565235d5825

  • SSDEEP

    1536:gUOBl9ZdO4n5M+HGbb3/gmsN6b+O4PWGBr:gU8lOs28Gbb3/hslOOvr

Score
10/10

Malware Config

Extracted

Family

xworm

C2

147.185.221.18:45497

Attributes
  • Install_directory

    %AppData%

  • install_file

    discord.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • HISH.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections