Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    WinRAR.exe

  • Size

    226KB

  • MD5

    60219035e32ad00d4c691a1bdc6455fb

  • SHA1

    5f3740fcf89a95437ce184cfe22f23ed8b5b9254

  • SHA256

    e005f5c2e4fdd277ced1ae42272b864e47de334e0d2a1043f24c21253da18ae5

  • SHA512

    b98eb125f7812ac5d2243bd0d6ee07e918af5d0a46d86a6b242a7d8f91dbaaa48fabb562c316abbbf93db0c5ffc3a16184233000b379bafcdb3104c470055fc7

  • SSDEEP

    6144:BrtsaOHbuje+UhcX7elbKTua9bfF/H9d9n:bs7gd3X3u+

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

3.1

C2

society-painted.at.ply.gg:17251

Attributes
  • Install_directory

    %Public%

  • install_file

    USB.exe

  • telegram

    https://api.telegram.org/bot5817418329:AAGYtFww9eAGl3ZTuqrCmSNxu_TJJiAWkzA/sendMessage?chat_id=1860651440

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • WinRAR.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections