General

  • Target

    Зака гей.exe

  • Size

    79KB

  • MD5

    6a82ec7dea40692810f389380b656632

  • SHA1

    76f0430bb027be8267531bd4c74e5dff8c320209

  • SHA256

    071f192d91385241334a3d171871a3a5c48da7283edc155ea059af8a20c5e81d

  • SHA512

    7280b1c766657f8e050b7ba43c6a91b368b37868d31483eae455ae684a3d335a4dc82c7999e9c38d1b50730ece2b3e9b1b9e92c86b87b623dac8e07da27772c4

  • SSDEEP

    1536:PP8dK6+XEvbwxo3pbmJiUdb6m6Vko3UmO7UIqvpyE:PPt6nJ3pbm8UdblqUmO7UI68E

Score
10/10

Malware Config

Extracted

Family

xworm

C2

18.ip.gl.ply.gg:20674

Attributes
  • Install_directory

    %AppData%

  • install_file

    system32.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Зака гей.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections