Overview

overview

10

Static

static

10

SolarLoader.exe

windows7-x64

10

SolarLoader.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    SolarLoader.exe

  • Size

    40KB

  • MD5

    a91c14c6fff5a4946f57681ce026772f

  • SHA1

    5bfa1a3fe65da8d8ce5fd9f7f22391f35ae236e2

  • SHA256

    02bec480b8e444b37197f3dab0640c69160dcf11ec58b02b1b9a5a48d001d147

  • SHA512

    38266df1ef8476dc8ea7e8ff1e117eabd93b4faccff6cf49a4382e5542fbe730df5851d4986fcbe02d3d0cab58787e31424987d145f53929ab0c256bf5419d0e

  • SSDEEP

    768:2z8ryxe+tzFGv1EthlKuqJF5P+9O9mW1n68OMhf3Eav:s8rSNtBeSJKvFs9U9n68OM99

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

127.0.0.1:58347

continue-silk.gl.at.ply.gg:58347
Mutex

bBDSmwBR7TWGI8wc

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • SolarLoader.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections